CVE-2019-6849 PUBLISHED CVSS 5 MEDIUM

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.

EPSS 0.32% · 55.1th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.32%
55.1th percentile

Affected Products

VendorProductVersions
schneider-electricmodicon_bmenoc_0311_firmware
schneider-electricmodicon_m580_firmware
schneider-electricmodicon_bmenoc_0321_firmware
n/aModicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321

Timeline

References

Open in Interactive Console →