CVEvulnerability

CVE-2019-6527

9.8 CRITICAL Published 2019-02-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.

Affected configurations

• kunbus pr100088 modbus gateway firmware (< r02)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References