PT-2020-11210 · Unknown · Pr100088 Modbus Gateway

Published 2020-01-07 · Updated 2020-01-12 · CVE-2019-6529

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166)

Description An attacker could specially craft an FTP request that could crash the gateway.

Recommendations For versions prior to release R02 (or Software Version 1.1.13166), update to release R02 or later (or Software Version 1.1.13166 or later) to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-6529

Affected Products

Pr100088 Modbus Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6529 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6529 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 · Note