CVE-2019-6846: Medium severity schneider electric modicon m580 firmware vulnerability
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2019-6846?
The vulnerability CVE-2019-6846 is a CWE-319: Cleartext Transmission of Sensitive Information vulnerability that exists in Modicon M580, Modicon M340, Modicon BMxCRA, and 140CRA modules when using the FTP protocol.
What software is affected by CVE-2019-6846?
The following software is affected by CVE-2019-6846: Schneider-electric Modicon M580 Firmware, Schneider-electric Modicon M340 Firmware, Schneider-electric Modicon Bmxcra Firmware, and Schneider-electric Modicon 140cra Firmware.
What is the severity of CVE-2019-6846?
CVE-2019-6846 has a severity level of medium with a severity value of 6.5.
How can I fix CVE-2019-6846?
To fix CVE-2019-6846, it is recommended to apply the necessary firmware updates provided by Schneider Electric.
Where can I find more information about CVE-2019-6846?
You can find more information about CVE-2019-6846 at the following link: https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02