Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500293.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Schneider-electric Modicon Exposure of Sensitive Information to an Unauthorized Actor

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10

0.002 Low

EPSS

Percentile

54.0%

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.

File data ot_500293.nasl
VendorProductVersionCPE
schneider-electricmodicon_m580_firmware-cpe:2.3:o:schneider-electric:modicon_m580_firmware:-:*:*:*:*:*:*:*
schneider-electricmodicon_m580-cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0311_firmware-cpe:2.3:o:schneider-electric:modicon_bmenoc_0311_firmware:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0311-cpe:2.3:h:schneider-electric:modicon_bmenoc_0311:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0321_firmware-cpe:2.3:o:schneider-electric:modicon_bmenoc_0321_firmware:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0321-cpe:2.3:h:schneider-electric:modicon_bmenoc_0321:-:*:*:*:*:*:*:*

0.002 Low

EPSS

Percentile

54.0%

Related for OT_500293.NASL