detection.wiki

Defender-DeviceTvmSoftwareVulnerabilitiesKB

any: Vulnerability knowledge base

#

Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.

Table
DeviceTvmSoftwareVulnerabilitiesKB

Detection Fields #

Fields referenced by at least one attached detection rule. This view counts distinct rules and is not a complete schema for this catalog entry.

NameRulesVendors
CveId1 detection ruleKusto
CvssVector1 detection ruleKusto
IsExploitAvailable1 detection ruleKusto

Representative record #

{
  "AffectedSoftware": [
    "schneider-electric:bmxnor0200h_firmware"
  ],
  "AffectedSoftware@odata.type": "#Collection(String)",
  "CveId": "CVE-2019-6810",
  "CveSupportability": "Supported",
  "CvssScore": 8.6,
  "CvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C",
  "EpssScore": 0.01729,
  "IsExploitAvailable": 0,
  "IsExploitAvailable@odata.type": "#SByte",
  "LastModifiedTime": "2026-06-17T02:39:43.35Z",
  "PublishedDate": "2019-08-12T00:00:00Z",
  "VulnerabilityDescription": "Summary: The Schneider Electric BMXNOR0200H Ethernet / Serial RTU module is vulnerable to an Improper Access Control vulnerability. This vulnerability exists in all firmware versions of the module and can be exploited by unauthorized users when using the IEC 60870-5-104 protocol. By exploiting this vulnerability, a remote attacker could execute arbitrary commands on the system. Impact: If this vulnerability is exploited, an attacker could gain unauthorized access to the Schneider Electric BMXNOR0200H Ethernet / Serial RTU module and execute arbitrary commands. This could lead to unauthorized control of the system and potential disruption of critical operations. [Generated by AI]",
  "VulnerabilitySeverityLevel": "High"
}

Detection Patterns #

References #