Skip to content
OpenAdvisories
Critical ICSA-19-036-05 5 CVEs

Kunbus PR100088 Modbus Gateway (Update B)

Published Feb 5, 2019 · Updated Feb 28, 2019 · Revision 3

Vendor: KUNBUS Product: PR100088 Modbus gateway

Summary

Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and/or cause a denial-of-service condition.

Vulnerabilities 5

  • Unscored —
    CVE-2019-6527

    PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able …

    ICS-CERT PR100088 Modbus gateway
  • Unscored —
    CVE-2019-6529

    An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release…

  • Unscored —
    CVE-2019-6531

    An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to …

    KUNBUS PR100088 Modbus gateway
  • Unscored —
    CVE-2019-6533

    Registers used to store Modbus values can be read and written from the web interface without authentication in the PR10…

    ICS-CERT PR100088 Modbus gateway
  • Unscored —
    CVE-2019-6549

    An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Rel…

    ICS-CERT PR100088 Modbus gateway

Revision history

  1. #3

    ICSA-19-036-05 Kunbus PR100088 Modbus Gateway (Update B)

  2. #2

    ICSA-19-036-05 Kunbus PR100088 Modbus Gateway (Update A)

  3. #1

    ICSA-19-036-05 Kunbus PR100088 Modbus Gateway

References