CVE-2019-6850 - A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module

Back Back to CVE browser

HIGH

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module

Published Oct 29, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.71%

Description

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.

Affected products

Vendor n/a Product Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321 Default
n/a
- Version
  Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321

n/a

Version	Status	Constraints
Modicon M580, Modicon BMENOC 0311, Modicon BMENOC 0321	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16404
Advisory
https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16404		Advisory
https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04		x_refsource_CONFIRMVendor Advisory