CVE-2019-6527
Critical
Description
PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.
SeverityCritical
CVSS9.8
Exploit probability—
ProductKunbus Pr100088 Modbus Gateway Firmware
PublishedFeb 12, 2019
First seenFeb 12, 2019
Weakness typeCWE-287Improper authentication
How to fix
Update
- kunbus pr100088_modbus_gateway_firmwarer02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kunbus pr100088_modbus_gateway_firmware | v < r02 | r02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.