PT-2019-18161 · Unknown · Pr100088 Modbus Gateway

Publicado 2019-02-12 · Atualizado 2020-10-05 · CVE-2019-6549

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)

Description An issue exists where an attacker could retrieve plain-text credentials stored in an XML file through FTP.

Recommendations For versions prior to Release R02 (or Software Version 1.1.13166), update to Release R02 or Software Version 1.1.13166 or later to resolve the issue.

Correção

Insufficiently Protected Credentials

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-522

CWE-312

Identificadores relacionados

CVE-2019-6549

Produtos afetados

Pr100088 Modbus Gateway

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 · Nota
• https://osv.dev/vulnerability/CVE-2019-6549 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6549 · Nota de Segurança