Description
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information disclosure when using the FTP protocol.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions) | Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions) | — |
Advisories 1
- SEVD-2019-281-02 Modicon Controllers Schneider Electric CPCERT · Aug 13, 2024