CVE-2019-6844
Severity Score
4.9
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.
Existe una vulnerabilidad CWE-755: Manejo inadecuado de condiciones excepcionales en Modicon M580, Modicon M340, Modicon BMxCRA y los módulos 140CRA (todas las versiones de firmware), lo que podría causar un ataque de Denegación de Servicio en el PLC cuando se actualiza el controlador con un paquete de firmware que contiene una imagen del servidor web no válida usando el protocolo FTP
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-25 CVE Reserved
- 2019-10-29 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-755: Improper Handling of Exceptional Conditions
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.se.com/ww/en/download/document/SEVD-2019-281-02 | 2022-02-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Firmware Search vendor "Schneider-electric" for product "Modicon M580 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Search vendor "Schneider-electric" for product "Modicon M580" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Search vendor "Schneider-electric" for product "Modicon M340" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon Bmxcra Firmware Search vendor "Schneider-electric" for product "Modicon Bmxcra Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon Bmxcra Search vendor "Schneider-electric" for product "Modicon Bmxcra" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon 140cra Firmware Search vendor "Schneider-electric" for product "Modicon 140cra Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon 140cra Search vendor "Schneider-electric" for product "Modicon 140cra" | - | - |
Safe
|