Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Priority LOW 24

An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01011 Published 2020-01-07 No fix listed CWE-20
Priority MEDIUM 42

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01226 Published 2019-02-12 No fix listed CWE-306
Priority MEDIUM 44

PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the devic…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2019-02-12 No fix listed CWE-287