CVE-2019-6831: schneider electric se bmxnor0200h ethernet / serial rtu module

Vulnerability summary

CVE-2019-6831 is a high (CVSS 8.6) vulnerability in schneider electric se bmxnor0200h ethernet / serial rtu module. EPSS estimates a 1.40% chance of exploitation in the next 30 days, higher than 72% of scored vulnerabilities.

Timeline

1. 17-09-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on port 2404/TCP.

• CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.