HIGH🇵🇱 Wersja polska

CVE-2019-6531

CVSS 8.1v3.1pub. 2019-04-02upd. 2024-11-21

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Kunbus Pr100088 Modbus Gateway

    HW
    Kunbus
    all versions

  • Kunbus Pr100088 Modbus Gateway Firmware

    OS
    Kunbus
    < 1.1.13166
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-6527CRITICAL9.8PL ✓same product

Auth Bypass w Kunbus PR100088 Modbus Gateway — zmiana hasła admina

CVE-2019-6533CRITICAL9.1PL ✓same product

Brak uwierzytelnienia przy odczycie i zapisie rejestrów Modbus w bramce Kunbus PR100088

CVE-2019-6549HIGH7.2same product

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions pri...

CVE-2019-6529MEDIUM4.9same product

An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior t...

CVE-2025-41646CRITICAL9.8PL ✓same vendor

Obejście uwierzytelnienia w Kunbus RevPi Status poprzez błędną konwersję typów