PT-2019-18143 · Kunbus · Kunbus Pr100088 Modbus Gateway

Publicado 2019-04-02 · Atualizado 2021-06-22 · CVE-2019-6531

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)

Description An issue exists where an attacker could retrieve passwords from an HTTP GET request if they are in a Man-In-The-Middle (MITM) position.

Recommendations For Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166), update to Release R02 or Software Version 1.1.13166 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-598

Identificadores relacionados

CVE-2019-6531

Produtos afetados

Kunbus Pr100088 Modbus Gateway

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6531 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6531 · Aviso do Fabricante