Lucene search

IcscertCVE-2019-6531

HistoryApr 02, 2019 - 8:29 p.m.

CVE-2019-6531

2019-04-0220:29:00

CWE-598

icscert

web.nvd.nist.gov

cve-2019-6531

kunbus

pr100088

modbus

password retrieval

http

mitm

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

52.5%

JSON

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.

Affected configurations

Nvd

Node

kunbuspr100088_modbus_gatewayMatch-

AND

kunbuspr100088_modbus_gateway_firmwareRange<1.1.13166

VendorProductVersionCPE
kunbuspr100088_modbus_gateway-cpe:2.3:h:kunbus:pr100088_modbus_gateway:-:*:*:*:*:*:*:*
kunbuspr100088_modbus_gateway_firmware*cpe:2.3:o:kunbus:pr100088_modbus_gateway_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kunbus	pr100088_modbus_gateway	-	cpe:2.3:h:kunbus:pr100088_modbus_gateway:-:::::::*
kunbus	pr100088_modbus_gateway_firmware	*	cpe:2.3:o:kunbus:pr100088_modbus_gateway_firmware::::::::

CNA Affected

[
  {
    "product": "PR100088 Modbus gateway",
    "vendor": "Kunbus",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to Release R02 (or Software Version 1.1.13166)"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-19-036-05

Social References

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

52.5%

JSON

Related for CVE-2019-6531