Medium severity6.5NVD Advisory· Published Oct 29, 2019· Updated Jun 17, 2026
CVE-2019-6846
CVE-2019-6846
Description
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.
Affected products
8- Schneider Electric/Modicon M580, Modicon M340, Modicon BMxCRA and 140CRAdescription
- Range: all firmware versions
- Range: all firmware versions
- Range: all firmware versions
- cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_bmxcra_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_140cra_firmware:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02nvdVendor Advisory
News mentions
0No linked articles in our index yet.