CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2019-6846
Medium (6.5) in schneider-electric. EPSS 1.0% chance of exploitation in the next 30 days.
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-319
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:modicon_140cra_firmware
- schneider-electric:modicon_bmxcra_firmware
- schneider-electric:modicon_m340_firmware
- schneider-electric:modicon_m580_firmware