CVE-2019-6531

2019-04-0219:15:11

CWE-598

icscert

www.cve.org

AI Score

Confidence

High

EPSS

0.002

Percentile

52.5%

JSON

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.

CNA Affected

[
  {
    "product": "PR100088 Modbus gateway",
    "vendor": "Kunbus",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to Release R02 (or Software Version 1.1.13166)"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-19-036-05