CVE-2019-6531

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 if the attacker is in an MITM position...

CVE-2019-6531

Affected product: Kunbus PR100088 Modbus gateway (all versions prior to Release R02 / Software 1.1.13166). Issue: Information Exposure Through Query Strings in GET Request (CWE-598) allows an MITM attacker to retrieve passwords via an HTTP GET request. Impact: password exposure with high severity...

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

CVE-2018-16563

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays are affected by CVE-2018-16563 due to improper input validation. Specially crafted packets sent to TCP port 102 can cause a denial-of-service, requiring a manual restart to restore EN100 module functionality. Exploitation requires ...

Schneider Electric Modbus Communication DTM Library Detection (Windows SMB Login)

Detects the installed version of Schneider Electric Modbus Communication DTM Library for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2019-6549

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

Design/Logic Flaw

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2019-6549

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2019-6549

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2019-6549

CVE-2019-6549 concerns the PR100088 Modbus gateway where plain-text credentials are stored in an XML file and can be retrieved via FTP on all versions prior to Release R02 (or Software Version 1.1.13166). The issue is categorized under Information Exposure Through Get/Internal File Storage, enabl...

CVE-2019-6527

PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted...

Authentication flaw

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166...

Design/Logic Flaw

PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted...

CVE-2019-6533

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166...

CVE-2019-6527

PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted...

CVE-2019-6533

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166...

CVE-2019-6527

CVE-2019-6527 affects Kunbus PR100088 Modbus gateway: versions prior to Release R02 (or Software Version 1.1.13166) are vulnerable to an improper authentication flaw that may allow an attacker to change an admin password for a user who is currently or previously logged in, provided the device has...

CVE-2019-6533

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166...

CVE-2019-6533

CVE-2019-6533 affects the Kunbus PR100088 Modbus Gateway. Registers used to store Modbus values can be read and written through the web interface without authentication on versions prior to Release R02 (or Software Version 1.1.13166). Public sources (NVD/NVD-linked advisories, ICS-CERT) corrobora...

CVE-2019-6527

PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted...