PT-2019-18161 · Unknown · Pr100088 Modbus Gateway

Published 2019-02-12 · Updated 2020-10-05 · CVE-2019-6549

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)

Description An issue exists where an attacker could retrieve plain-text credentials stored in an XML file through FTP.

Recommendations For versions prior to Release R02 (or Software Version 1.1.13166), update to Release R02 or Software Version 1.1.13166 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-522

CWE-312

Related Identifiers

CVE-2019-6549

Affected Products

Pr100088 Modbus Gateway

References · 3

• https://osv.dev/vulnerability/CVE-2019-6549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6549 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 · Note