CVE-2019-6812

A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol.

Score

CVSS 3.1 7.2 High

Status

Modified - cybersecurity@se.com

Published

2019-05-22

Last modified

2024-08-04

Weaknesses

CWE-798

Affected products

• Bmx-nor-0200h Firmware (Schneider-electric)

References

• https://security.cse.iitk.ac.in/responsible-disclosure
• https://www.schneider-electric.com/en/download/document/SEVD-2019-134-06/