Lucene search
PRIOn knowledge basePRION:CVE-2019-14925HistoryOct 28, 2019 - 1:15 p.m.
Design/Logic Flaw
2019-10-2813:15:00
PRIOn knowledge base
www.prio-n.com
6
An issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read sensitive configuration settings such as usernames, passwords, and other sensitive RTU data due to insecure permission assignment.
| CPE | Name | Operator | Version |
|---|---|---|---|
| me-rtu_firmware | le | 3.0 | |
| smartrtu_firmware | le | 2.02 |
Related
cve
cve
CVE-2019-14925
2019-10-28 13:15:10
nessus
nessus
cvelist
cvelist
CVE-2019-14925
2019-10-28 12:12:34
nvd
nvd
CVE-2019-14925
2019-10-28 13:15:10
ics
ics
Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU
2021-09-09 12:00:00