CVE-2019-6527 Vulnerability Details

  /     /     /  

CVE-2019-6527 Metadata Quick Info

CVE Published: 12/02/2019 | CVE Updated: 17/09/2024 | CVE Year: 2019
Source: icscert | Vendor: ICS-CERT | Product: PR100088 Modbus gateway
Status : PUBLISHED

---

CVE-2019-6527 Description

PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-287
CWE Name: IMPROPER AUTHENTICATION CWE-287
Source: ICS-CERT

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).