← Back

CVE-2019-6849

nvd nist
Published: Oct 29, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.

Affected (3)

Schneider Electric
3 products
Modicon M580 Firmware
Modicon Bmenoc 0311 Firmware
Modicon Bmenoc 0321 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M580 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M580
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon Bmenoc 0311 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon Bmenoc 0311
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon Bmenoc 0321 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon Bmenoc 0321
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cybersecurity@se.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.