CVE-2019-6849CWE-200

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of…

published October 29, 2019

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01709 · 77.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-10-29T14:53Z
EPSS history
Timeline
  • 29 OCT 14:53Z
    A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of…
    cvelistv5