CVE-2019-14929

CRITICAL

9.8

Descripcion

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords could allow an unauthenticated attacker to obtain configured username and password combinations on the RTU due to the weak credentials management on the RTU. An unauthenticated user can obtain the exposed password credentials to gain access to the following services: DDNS service, Mobile Network Provider, and OpenVPN service.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado10/28/2019

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

inea:me-rtuinea:me-rtu_firmwaremitsubishielectric:smartrtumitsubishielectric:smartrtu_firmware

Debilidades (CWE)

CWE-522

Referencias

https://www.mogozobo.com/(cve@mitre.org)

https://www.mogozobo.com/?p=3593(cve@mitre.org)

https://www.mogozobo.com/(af854a3a-2127-422b-91ae-364da2661108)

https://www.mogozobo.com/?p=3593(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.