CVE-2019-6846
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.
Una CWE-319: Existe una vulnerabilidad de Transmisión de Texto Sin Cifrar de Información Confidencial en Modicon M580, Modicon M340, Modicon BMxCRA y los módulos 140CRA (todas las versiones de firmware), que podrían causar una divulgación de información cuando se utiliza el protocolo FTP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-25 CVE Reserved
- 2019-10-29 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-319: Cleartext Transmission of Sensitive Information
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02 | 2022-02-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Firmware Search vendor "Schneider-electric" for product "Modicon M580 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Search vendor "Schneider-electric" for product "Modicon M580" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Search vendor "Schneider-electric" for product "Modicon M340" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon Bmxcra Firmware Search vendor "Schneider-electric" for product "Modicon Bmxcra Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon Bmxcra Search vendor "Schneider-electric" for product "Modicon Bmxcra" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon 140cra Firmware Search vendor "Schneider-electric" for product "Modicon 140cra Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon 140cra Search vendor "Schneider-electric" for product "Modicon 140cra" | - | - |
Safe
|