Schneider Electric Modicon Bmenoc 0321 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Schneider Electric Modicon Bmenoc 0321, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2019-6848schneider-electricmodicon_bmenoc_0311_firmware+2
EPSS score
32.14%
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module.7.5CVE-2019-6850schneider-electricmodicon_bmenoc_0311_firmware+2
EPSS score
1.71%
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.7.5CVE-2019-6849schneider-electricmodicon_bmenoc_0311_firmware+2
EPSS score
1.71%
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.