PT-2020-10328 · S3India · Husky Rtu 6049-E70 Firmware

Published 2020-02-14 · Updated 2020-02-25 · CVE-2019-20046

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue than CVE-2019-16879 and CVE-2019-20045.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-20046

Affected Products

Husky Rtu 6049-E70 Firmware

References · 5

• https://osv.dev/vulnerability/CVE-2019-20046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20046 · Security Note
• https://us-cert.gov/ics/advisories/icsa-20-042-01 · Note
• https://t.me/cvenotify/1035 · Telegram Post
• https://t.me/cvenotify/1036 · Telegram Post