VULNERABILITY INTELLIGENCE

CVE-2019-6846

CVSS score6.5 MEDIUM
EPSS probability0.98%
CISA KEVNot currently listed
Published2019-10-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references