PT-2019-18143 · Kunbus · Kunbus Pr100088 Modbus Gateway

Published 2019-04-02 · Updated 2021-06-22 · CVE-2019-6531

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)

Description An issue exists where an attacker could retrieve passwords from an HTTP GET request if they are in a Man-In-The-Middle (MITM) position.

Recommendations For Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166), update to Release R02 or Software Version 1.1.13166 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-598

Related Identifiers

CVE-2019-6531

Affected Products

Kunbus Pr100088 Modbus Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6531 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6531 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 · Note