Vulnerability in Schneider-Electric Bmx-Nor-0200h
CVE-2019-6812
A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol.
EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Schneider-electric Bmx-nor-0200h
- Schneider-electric Bmx-nor-0200h_firmware — versions 1.7
- N/a Modicon Rtu Module, Bmx-nor-0200h With Firmware Versions Prior To V1.7 Ir 19 — versions Modicon RTU Module, BMX-NOR-0200H with firmware versions prior to V1.7 IR 19
Weakness classification (CWE)
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
- cybersecurity@se.com (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-6812?
- CVE-2019-6812 is a high-severity vulnerability in Schneider-Electric Bmx-Nor-0200h, classified under Use of Hard-coded Credentials. CVSS score: 7.2/10. Published 2019-05-22.
- How severe is CVE-2019-6812?
- High severity. CVSS v3 base score is 7.2 out of 10.