Vulnerability in Schneider-Electric Bmx-Nor-0200h
CVE-2019-6812
A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (65.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 65.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.011 · change: -0.000
Affected products
- Schneider-Electric Bmx-Nor-0200h
- Schneider-Electric Bmx-Nor-0200h Firmware — versions 1.7
- Modicon Rtu Module, Bmx-Nor-0200h With Firmware Versions Prior To V1.7 Ir 19 — versions Modicon RTU Module, BMX-NOR-0200H with firmware versions prior to V1.7 IR 19
Weakness classification (CWE)
References
- www.schneider-electric.com/en/download/document/SEVD-2019-134-06/ (Vendor Advisory)
- security.cse.iitk.ac.in/responsible-disclosure (Third Party Advisory)
Frequently asked questions
- What is CVE-2019-6812?
- CVE-2019-6812 is a high-severity vulnerability in Schneider-Electric Bmx-Nor-0200h, classified under Use of Hard-coded Credentials. CVSS score: 7.2/10. Published 2019-05-22.
- How severe is CVE-2019-6812?
- High severity. CVSS v3 base score is 7.2 out of 10.