CVE-2021-22749

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially crafted HTTP request is sent to the web server of the module.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-05	Vendor Advisory
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-05	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.6:ir4::::::
	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir10::::::
	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir15b::::::
	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir17::::::
	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir18::::::
	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir19::::::
	cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir20::::::

cpe:2.3:h:schneider-electric:modicon_x80_bmxnor0200h_rtu:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-11 16:15

Updated : 2024-11-21 05:50

NVD link : CVE-2021-22749

Mitre link : CVE-2021-22749

CVE.ORG link : CVE-2021-22749

JSON object : View

Products Affected

schneider-electric

modicon_x80_bmxnor0200h_rtu_firmware
modicon_x80_bmxnor0200h_rtu

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2021-22749", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2021-06-11T16:15:09.157", "references": [{"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-05", "tags": ["Vendor Advisory"], "source": "cybersecurity@se.com"}, {"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-05", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cybersecurity@se.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially crafted HTTP request is sent to the web server of the module."}, {"lang": "es", "value": "Un CWE-787: Se presenta una vulnerabilidad de Exposici\u00f3n de Informaci\u00f3n Confidencial a un Actor No Autorizado en Modicon X80 BMXNOR0200H RTU versiones SV1.70 IR22 y anteriores, que podr\u00eda provocar un filtrado de informaci\u00f3n relativa a la configuraci\u00f3n actual de la RTU, incluidos los par\u00e1metros de comunicaci\u00f3n dedicados a la telemetr\u00eda, cuando se env\u00eda una petici\u00f3n HTTP especialmente dise\u00f1ada al servidor web del m\u00f3dulo"}], "lastModified": "2024-11-21T05:50:35.423", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.6:ir4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8841CE06-FD95-41E4-A5FB-A83B9F2BD558"}, {"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D02244CF-75D7-4952-9344-F72F9A70DE3C"}, {"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir15b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED3E913A-4A96-4AB5-9EDC-4E56F0735B2A"}, {"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir17:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F5B0DA3-9E61-4F30-A38E-EB444FA5C914"}, {"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir18:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72E56D0A-9A04-462B-BDFD-C5852C79C46B"}, {"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir19:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66DF481E-4B26-4F19-AD1E-D063756D9016"}, {"criteria": "cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir20:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3AAC25B-BD85-47C5-9E58-B603670581A1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:modicon_x80_bmxnor0200h_rtu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B59B3372-5D62-469D-92C1-368788CC98DE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cybersecurity@se.com"}