Authentication flaw

2019-02-1217:29:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).

CPENameOperatorVersion
pr100088_modbus_gateway_firmwareeq< r2

CPE	Name	Operator	Version
	pr100088_modbus_gateway_firmware	eq	< r2

References

ics-cert.us-cert.gov/advisories/ICSA-19-036-05