CVE-2019-6527 - AskarLabs CVE Database

CVE-2019-6527

Vendor Ics-Cert

Product PR100088 Modbus gateway

Weakness CWE-287 · Improper authentication

Published February 12, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.

Key dates

02Disclosure timeline

February 12, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-6527 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2026-7876 Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration CVE-2025-14738 Configuration Disclosure Vulnerability in TP-Link WA850RE CVE-2018-1106 CVE-2026-28514 Rocket.Chat: Users can login with any password via the EE ddp-streamer-service CVE-2022-38119 POWERCOM CO., LTD. UPSMON PRO - Broken Authentication