CVE-2021-22749

Name of the Vulnerable Software and Affected Versions Modicon X80 BMXNOR0200H RTU versions SV1.70 IR22 and prior

Description A vulnerability exists that could cause an information leak concerning the current RTU configuration, including communication parameters dedicated to telemetry. This occurs when a specially crafted HTTP request is sent to the web server of the module.

Recommendations For Modicon X80 BMXNOR0200H RTU versions SV1.70 IR22 and prior, consider restricting access to the web server of the module to minimize the risk of exploitation. As a temporary workaround, avoid using the web server until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.