CVE-2019-6810

2019-09-1719:52:38

CWE-284

schneider

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.6%

JSON

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol.

CNA Affected

[
  {
    "product": "BMXNOR0200H Ethernet / Serial RTU module",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "all firmware versions"
      }
    ]
  }
]