CVE-2019-6533

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).

Score

CVSS 3.1 9.1 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-02-12

Last modified

2024-09-16

Weaknesses

CWE-306

Affected products

• Pr100088 Modbus Gateway (Ics-cert)
• Pr100088 Modbus Gateway Firmware (Kunbus)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05