CVE-2019-6846 Information disclosure in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions)

Medium 6.5 Published 29 Oct 2019 Updated 4 Aug 2024

Attackers can intercept sensitive information transmitted via FTP on Modicon PLC modules due to cleartext transmission.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2019-6846?

CVE-2019-6846 is a medium-severity vulnerability in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), published on 29 Oct 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.

Weakness: CWE-319

Which versions are affected by CVE-2019-6846?

It affects 4 products.

Products include Schneider-Electric Modicon 140cra Firmware, Schneider-Electric Modicon Bmxcra Firmware, Schneider-Electric Modicon M340 Firmware, Schneider-Electric Modicon M580 Firmware.

How do I fix CVE-2019-6846?

No fix has been published for CVE-2019-6846 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-6846 being exploited?

There is no known exploitation of CVE-2019-6846 in the wild and no public exploit code.

Sources

Also known as GHSA-4x3q-cmgw-gw26.