Critical severity · published Feb 12, 2019
CVE-2019-6527
PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or…
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
PR100088 Modbus gateway · ICS-CERT
All versions prior to Release R02 (or Software Version 1.1.13166) · source: vendor
PM
Pr100088 Modbus Gateway Firmware · Kunbus
before r02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6527
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6527
Mitigation
https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05
More from PR100088 Modbus gateway
9.1
CVE-2019-6533
Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or…
7.2
CVE-2019-6549
An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP