PT-2019-3830 · Schneider Electric · Modicon Bmxcra+3

Published 2019-10-08 · Updated 2022-02-03 · CVE-2019-6842

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 (all firmware versions) Modicon M340 (all firmware versions) Modicon BMxCRA (all firmware versions) 140CRA (all firmware versions)

Description A vulnerability exists in the Modicon controllers' firmware, related to the improper handling of exceptional conditions. This issue is associated with the lack of integrity check of the firmware update, which could allow a remote attacker to upload a firmware update with a missing web server image via the FTP protocol, resulting in a Denial of Service attack on the PLC.

Recommendations For Modicon M580, consider disabling the FTP protocol until a patch is available. For Modicon M340, restrict access to the firmware update module to minimize the risk of exploitation. For Modicon BMxCRA, avoid using the firmware update feature with a missing web server image until the issue is resolved. For 140CRA, as a temporary workaround, consider disabling the firmware update functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-248

CWE-755

Related Identifiers

BDU:2019-04189

CVE-2019-6842

Affected Products

140Cra

Modicon Bmxcra

Modicon M340

Modicon M580

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-6842 · Security Note
• https://bdu.fstec.ru/vul/2019-04189 · Security Note
• https://se.com/ww/en/download/document/SEVD-2019-281-02 · Vendor Advisory
• https://schneider-electric.com/en/download/document/SEVD-2019-281-02 · Note
• https://t.me/cvenotify/13429 · Telegram Post