VDB

CVE-2019-6850

CVE-2019-6850 PUBLISHED CVSS 7.5 HIGH

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.

EPSS 0.32% · 55.7th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.32%
55.7th percentile

Affected Products

VendorProductVersions
n/aModicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321*
schneider-electricmodicon_bmenoc_0321_firmware
schneider-electricmodicon_m580_firmware
schneider-electricmodicon_bmenoc_0311_firmware

Exploit Intelligence

…and 131 more exploits

Timeline

  • Oct 8, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Jun 28, 2021 PoC Published
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 11, 2021 PoC Published
  • Dec 13, 2021 PoC Published
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›