CVE-2019-6533 Vulnerability Details

  /     /     /  

CVE-2019-6533 Metadata Quick Info

CVE Published: 12/02/2019 | CVE Updated: 16/09/2024 | CVE Year: 2019
Source: icscert | Vendor: ICS-CERT | Product: PR100088 Modbus gateway
Status : PUBLISHED

---

CVE-2019-6533 Description

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-306
CWE Name: MISSING AUTHENTICATION FOR CRITICAL FUNCTION CWE-306
Source: ICS-CERT

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).