A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.
References
Link | Resource |
---|---|
https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
No history.
Information
Published : 2019-10-29 19:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-6850
Mitre link : CVE-2019-6850
CVE.ORG link : CVE-2019-6850
JSON object : View
Products Affected
schneider-electric
- modicon_m580_firmware
- modicon_m580
- modicon_bmenoc_0311
- modicon_bmenoc_0311_firmware
- modicon_bmenoc_0321_firmware
- modicon_bmenoc_0321
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor