CVE-2019-14927 - An issue was discovered on Mitsubishi Electric Europe B.V · CoreCVE

Back Back to CVE browser

HIGH

An issue was discovered on Mitsubishi Electric Europe B.V

Published Oct 28, 2019

7.5

HIGH

CVSS 3.1

EPSS 41.85%

Description

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file (which contains data such as usernames, passwords, and other sensitive RTU data).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-306

Missing Authentication

CWE-425

References (2)

https://www.mogozobo.com/
Third Party Advisory
https://www.mogozobo.com/?p=3593
ExploitThird Party Advisory

Link	Providers	Tags
https://www.mogozobo.com/		Third Party Advisory
https://www.mogozobo.com/?p=3593		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 28, 2019

Updated Sep 10, 2024

Reserved Aug 10, 2019

Link CVE-2019-14927

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-14927

Severity n/a

Public date n/a

Links CVE-2019-14927