Schneider Electric Modicon Bmenoc 0311 vulnerabilities
3 vulnerabilities
Known vulnerabilities in Schneider Electric Modicon Bmenoc 0311, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-6848schneider-electricmodicon_bmenoc_0311_firmware+2
EPSS score32.14%
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module.CVE-2019-6850schneider-electricmodicon_bmenoc_0311_firmware+2EPSS score1.71%
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.CVE-2019-6849schneider-electricmodicon_bmenoc_0311_firmware+2EPSS score1.71%
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.