Improper authentication in PR100088 Modbus gateway - CVE-2019-6527
Published: February 5, 2019 / Updated: February 6, 2019
Vulnerability identifier: #VU17390
CSH Severity: Low
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-6527
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication.
The vulnerability exists due to improper authentication. A remote attacker can bypass authentication and change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.
Affected software
PR100088 Modbus gateway
How to mitigate CVE-2019-6527
Update to version R02.
PR100088 Modbus gateway - update to R02