Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:modicon_140cra_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicon 140Cra Firmware (3499d8d7-b86c-5d49-b280-65ecaa9fc682)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6847 vulnerable 2026-06-08 05:14:13.380815 Details available
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the FTP service when upgrading the firmware with a version incompatible with the application in the controller using FTP protocol.
Published: 2019-10-29T14:52:24.000Z
Updated: 2024-08-04T20:31:04.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6846 vulnerable 2026-06-08 05:14:13.380002 Details available
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.
Published: 2019-10-29T14:51:31.000Z
Updated: 2024-08-04T20:31:04.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6844 vulnerable 2026-06-08 05:14:13.347076 Details available
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.
Published: 2019-10-29T14:48:44.000Z
Updated: 2024-08-04T20:31:04.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6843 vulnerable 2026-06-08 05:14:13.346402 Details available
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the controller with an empty firmware package using FTP protocol.
Published: 2019-10-29T14:48:04.000Z
Updated: 2024-08-04T20:31:04.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6842 vulnerable 2026-06-08 05:14:13.345788 Details available
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the package using FTP protocol.
Published: 2019-10-29T14:47:16.000Z
Updated: 2024-08-04T20:31:04.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6841 vulnerable 2026-06-08 05:14:13.344299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.