CVE-2019-6812

CVE-2019-6812 is a high-severity vulnerability affecting Schneider Electric BMX-NOR-0200H devices with firmware versions prior to V1.7 IR 19, stemming from the use of hardcoded credentials. This flaw specifically impacts the FTP protocol, potentially leading to confidentiality breaches. With a CVSS score of 7.2, it can be exploited remotely with low attack complexity, allowing a high-privileged attacker to achieve high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.