High severity7.5NVD Advisory· Published Oct 29, 2019· Updated Jun 17, 2026
CVE-2019-6849
CVE-2019-6849
Description
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.
Affected products
7- cpe:2.3:o:schneider-electric:modicon_bmenoc_0311_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_bmenoc_0321_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m580_firmware:-:*:*:*:*:*:*:*
- Schneider Electric/Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321description
Patches
Vulnerability mechanics
References
1- www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04nvdVendor Advisory
News mentions
0No linked articles in our index yet.