PT-2019-18161

CVE-2019-6549

·

Published

2019-02-12

·

Updated

2020-10-05

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)
Description An issue exists where an attacker could retrieve plain-text credentials stored in an XML file through FTP.
Recommendations For versions prior to Release R02 (or Software Version 1.1.13166), update to Release R02 or Software Version 1.1.13166 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-522: Insufficiently Protected Credentials
CWE-312: Cleartext Storage of Sensitive Information
Related identifiers
CVE-2019-6549
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com