Uncaught Exception in Schneider Electric products - CVE-2019-6847

Vulnerability identifier: #VU22586

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-6847

CWE-ID: CWE-248

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncaught exception vulnerability when upgrading the firmware with a version incompatible with the application in the controller using FTP protocol. A remote authenticated administrator can cause a denial of service condition on the on the FTP service.

Modicon M340
Modicon M580
Modicon BMxCRA modules
Modicon 140CRA modules

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02

• Multiple vulnerabilities in Schneider Electric Modicon Controllers