CVE-2019-6844: Schneider Electric Modicon 140cra Firmware

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.

Affected products

• Schneider Electric Modicon 140cra Firmware: any version
• Schneider Electric Modicon Bmxcra Firmware: any version
• Schneider Electric Modicon m340 Firmware: any version
• Schneider Electric Modicon m580 Firmware: any version

Published 2019-10-29. Last modified 2026-06-17.