Schneider Electric Modicon 140cra Firmware vulnerabilities

6 CVEs affecting Schneider Electric Modicon 140cra Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6847, published 2019-10-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6841, published 2019-10-29. Medium severity, CVSS 4.9. EPSS: 23.7% chance of exploitation in the next 30 days. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA…
CVE-2019-6846, published 2019-10-29. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information…
CVE-2019-6847, published 2019-10-29. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of…
CVE-2019-6844, published 2019-10-29. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of…
CVE-2019-6843, published 2019-10-29. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA…
CVE-2019-6842, published 2019-10-29. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of…