Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution, obtain credentials, and use credentials found to log into other affected devices.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14931US | critical9.8 | Exploit | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote OS Command Injection vulnerabi… | ||||
| CVE-2019-14930US | critical9.8OT elevated | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Undocumented hard-coded user passwords for root, ineaadm… | ||||
| CVE-2019-14929US | critical9.8 | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords could allow an unauthenticate… | ||||
| CVE-2019-14928US | medium5.4 | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A number of stored cross-site script (XSS) vulnerabiliti… | ||||
| CVE-2019-14927US | high7.5OT high | Exploit | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnera… | ||||
| CVE-2019-14926US | critical9.8OT elevated | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow an attacker to gain unauthoris… | ||||
| CVE-2019-14925US | medium6.5OT elevated | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configu… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan