IM
IronMonkey Threat Research

CVE-2021-22749 MEDIUM

Published: 2021-06-11 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially crafted HTTP request is sent to the web server of the module.

Additional Descriptions (1)

Un CWE-787: Se presenta una vulnerabilidad de Exposición de Información Confidencial a un Actor No Autorizado en Modicon X80 BMXNOR0200H RTU versiones SV1.70 IR22 y anteriores, que podría provocar un filtrado de información relativa a la configuración actual de la RTU, incluidos los parámetros de comunicación dedicados a la telemetría, cuando se envía una petición HTTP especialmente diseñada al servidor web del módulo

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 1.4

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-200

Affected Products

Vendor Product Version Update Type
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.6 <built-in method update of dict object at 0x7e60b85eee00> Operating System
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.7 <built-in method update of dict object at 0x7e6107bcd900> Operating System
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.7 <built-in method update of dict object at 0x7e60e88756c0> Operating System
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.7 <built-in method update of dict object at 0x7e6110a548c0> Operating System
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.7 <built-in method update of dict object at 0x7e60ba9bcb40> Operating System
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.7 <built-in method update of dict object at 0x7e60ba9bce00> Operating System
schneider-electric modicon_x80_bmxnor0200h_rtu_firmware sv1.7 <built-in method update of dict object at 0x7e60b85ed980> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.6:ir4:*:*:*:*:*:*
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir10:*:*:*:*:*:*
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir15b:*:*:*:*:*:*
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir17:*:*:*:*:*:*
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir18:*:*:*:*:*:*
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir19:*:*:*:*:*:*
Yes cpe:2.3:o:schneider-electric:modicon_x80_bmxnor0200h_rtu_firmware:sv1.7:ir20:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:schneider-electric:modicon_x80_bmxnor0200h_rtu:-:*:*:*:*:*:*:*
Notification
Message here