PR100088 Modbus gateway vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

PM

Product

PR100088 Modbus gateway

by ICS-CERT · last CVE Feb 12, 2019

3

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 2High 1Medium 0Low 0

Severity

All severities3 Critical2 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add PR100088 Modbus gateway to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-6527	9.8	1%	Feb 12	PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or… Affected: All versions prior to Release R02 (or Software Version 1.1.13166)
CVE-2019-6533	9.1	1%	Feb 12	Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or… Affected: All versions prior to Release R02 (or Software Version 1.1.13166)
CVE-2019-6549	7.2	1%	Feb 12	An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP Affected: All versions prior to Release R02 (or Software Version 1.1.13166)