ZeroHour

CVE-2019-6846

CVSS 3.1
6.5 medium
EPSS
<1%p60
Published
()
Modified
Description

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.

Vendors
schneider-electric
Products
modicon m580 firmware, modicon m340 firmware, modicon bmxcra firmware, modicon 140cra firmware
Weakness
CWE-319
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

In the news