CVE-2019-14929

CRITICAL

9.8

Beschreibung

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords could allow an unauthenticated attacker to obtain configured username and password combinations on the RTU due to the weak credentials management on the RTU. An unauthenticated user can obtain the exposed password credentials to gain access to the following services: DDNS service, Mobile Network Provider, and OpenVPN service.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht10/28/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

inea:me-rtuinea:me-rtu_firmwaremitsubishielectric:smartrtumitsubishielectric:smartrtu_firmware

Schwachen (CWE)

CWE-522

Referenzen

https://www.mogozobo.com/(cve@mitre.org)

https://www.mogozobo.com/?p=3593(cve@mitre.org)

https://www.mogozobo.com/(af854a3a-2127-422b-91ae-364da2661108)

https://www.mogozobo.com/?p=3593(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.