Modicon X80 BMXNOR0200H RTU Module Security Advisory

This document is a security advisory from Schneider Electric detailing a vulnerability (CVE-2021-22749) in the Modicon X80 BMXNOR0200H RTU module's embedded web server, which could allow an unauthenticated remote attacker to leak sensitive configuration data. It provides remediation via firmware version V1.70 IR23 and lists mitigations such as disabling the web service, network segmentation, and VPN usage.