CVE-2019-6842: Schneider Electric Modicon 140cra Firmware

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the package using FTP protocol.

Affected products

• Schneider Electric Modicon 140cra Firmware: any version
• Schneider Electric Modicon Bmxcra Firmware: any version
• Schneider Electric Modicon m340 Firmware: any version
• Schneider Electric Modicon m580 Firmware: any version

Published 2019-10-29. Last modified 2026-06-17.