What’s Vulnerable › Vulnerabilities

CVE-2019-6812

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-22 · updated 2026-06-17
• Weakness: CWE-798

Description

A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol.

Affected products

• Modicon RTU Module, BMX-NOR-0200H with firmware versions prior to V1.7 IR 19: 1.7-ir17, 1.7-ir18

References

• https://security.cse.iitk.ac.in/responsible-disclosure
• https://www.schneider-electric.com/en/download/document/SEVD-2019-134-06/
• https://security.cse.iitk.ac.in/responsible-disclosure
• https://www.schneider-electric.com/en/download/document/SEVD-2019-134-06/

Get alerted when CVE-2019-6812 or the next vulnerability affects your stack