A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580 Modicon M340 Modicon BMxCRA and 140CRA modules (all firmware versions) which could cause information disclosure when using the FTP protocol.