Schneider Electric Modicon Bmenoc 0311 Firmware vulnerabilities

3 CVEs affecting Schneider Electric Modicon Bmenoc 0311 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6850, published 2019-10-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6848, published 2019-10-29. High severity, CVSS 8.6. EPSS: 32.1% chance of exploitation in the next 30 days. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version…
CVE-2019-6850, published 2019-10-29. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific…
CVE-2019-6849, published 2019-10-29. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific…