CVE-2019-6849: Schneider Electric Modicon Bmenoc 0311 Firmware

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.

Affected products

• Schneider Electric Modicon Bmenoc 0311 Firmware: affected versions not specified
• Schneider Electric Modicon Bmenoc 0321 Firmware: affected versions not specified
• Schneider Electric Modicon m580 Firmware: affected versions not specified

Published 2019-10-29. Last modified 2026-06-17.