Sensitive Data Exposure in Kunbus Modbus Gateway by Kunbus
CVE-2019-6531

8.1HIGH

Key Information:

Vendor

Kunbus

Status
Pr100088 Modbus Gateway
Vendor
CVE Published:
2 April 2019

What is CVE-2019-6531?

The Kunbus PR100088 Modbus gateway prior to Release R02 is susceptible to a vulnerability that allows an attacker positioned in a man-in-the-middle (MITM) scenario to capture sensitive data, including passwords, through an unprotected HTTP GET request. This can lead to unauthorized access and exploitation of the system, highlighting the urgent need for secure data transmission mechanisms.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PR100088 Modbus gateway All versions prior to Release R02 (or Software Version 1.1.13166)

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.