High ICSA-20-044-01 3 CVEs

Schneider Electric Modicon Ethernet Serial RTU

Published Feb 13, 2020 · Updated Feb 13, 2020

Vendor: Schneider Electric Product: BMXNOR0200H: Ethernet / Serial RTU Module

Summary

Successful exploitation of these vulnerabilities could allow remote code execution or cause a denial-of-service condition.

Vulnerabilities 3

Unscored —

CVE-2019-6810

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware version…

Schneider Electric BMXNOR0200H: Ethernet / Serial RTU Module ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6813

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial R…

CVE-2019-6813 BMXNOR0200H Ethernet / Serial RTU module Modicon M340 controller

Sep 17, 2019
Unscored —

CVE-2019-6831

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial R…

Schneider Electric BMXNOR0200H: Ethernet / Serial RTU Module ICS / OT

Sep 17, 2019

Revision history

2020-02-13 #1
ICSA-20-044-01 Schneider Electric Modicon Ethernet Serial RTU

References

ICS Advisory ICSA-20-044-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-044-01
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B