PT-2019-18145 · Pr Electronics · Pr100088 Modbus Gateway

Published 2019-02-12 · Updated 2023-01-31 · CVE-2019-6533

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)

Description The issue allows registers used to store Modbus values to be read and written from the web interface without authentication.

Recommendations For PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166), update to Release R02 or Software Version 1.1.13166 or later to resolve the issue.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-6533

Affected Products

Pr100088 Modbus Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6533 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6533 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 · Note