CVEvulnerability
CVE-2019-6533
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-306
Description
Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).
Affected configurations
• kunbus pr100088 modbus gateway firmware (< r02)
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 Mitigation, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05 Mitigation, Third Party Advisory, US Government Resource