Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution, obtain credentials, and use credentials found to log into other affected devices.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-14931US | critical9.8 | Exploit | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote OS Command Injection vulnerabi… | ||||
| CVE-2019-14930US | critical9.8OT erhöht | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Undocumented hard-coded user passwords for root, ineaadm… | ||||
| CVE-2019-14929US | critical9.8 | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords could allow an unauthenticate… | ||||
| CVE-2019-14928US | medium5.4 | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A number of stored cross-site script (XSS) vulnerabiliti… | ||||
| CVE-2019-14927US | high7.5OT hoch | Exploit | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnera… | ||||
| CVE-2019-14926US | critical9.8OT erhöht | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow an attacker to gain unauthoris… | ||||
| CVE-2019-14925US | medium6.5OT erhöht | — | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configu… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (7)
- MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ - MitigationsmartRTU and INEA ME-RTU
Mitsubishi Electric Europe B.V. recommends users update to firmware Version 3.3 or later.
https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan