Description
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)
Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)affected