Defender-DeviceTvmSoftwareVulnerabilitiesKB

{
  "AffectedSoftware": [
    "schneider-electric:bmxnor0200h_firmware"
  ],
  "AffectedSoftware@odata.type": "#Collection(String)",
  "CveId": "CVE-2019-6810",
  "CveSupportability": "Supported",
  "CvssScore": 8.6,
  "CvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C",
  "EpssScore": 0.01729,
  "IsExploitAvailable": 0,
  "IsExploitAvailable@odata.type": "#SByte",
  "LastModifiedTime": "2026-06-17T02:39:43.35Z",
  "PublishedDate": "2019-08-12T00:00:00Z",
  "VulnerabilityDescription": "Summary: The Schneider Electric BMXNOR0200H Ethernet / Serial RTU module is vulnerable to an Improper Access Control vulnerability. This vulnerability exists in all firmware versions of the module and can be exploited by unauthorized users when using the IEC 60870-5-104 protocol. By exploiting this vulnerability, a remote attacker could execute arbitrary commands on the system. Impact: If this vulnerability is exploited, an attacker could gain unauthorized access to the Schneider Electric BMXNOR0200H Ethernet / Serial RTU module and execute arbitrary commands. This could lead to unauthorized control of the system and potential disruption of critical operations. [Generated by AI]",
  "VulnerabilitySeverityLevel": "High"
}