{"id":"CVE-2019-6533","aliases":["EUVD-2019-16092","GHSA-gj7v-j8r4-326v"],"status":"published","title":"Registers used to store Modbus values can be read and written from the web interface without...","description":"Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01226,"percentile":0.69018,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2019-02-12T17:00:00Z","modified":"2026-06-17T02:39:12Z","products":[{"vendor":"ics-cert","product":"pr100088 modbus gateway"},{"vendor":"kunbus","product":"pr100088_modbus_gateway_firmware"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6533"},{"url":"https://github.com/advisories/GHSA-gj7v-j8r4-326v"}],"sources":{"cve":[{"id":"CVE-2019-6533","description":"Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).","status":"published","published":"2019-02-12T17:00:00Z","modified":"2024-09-16T17:18:38.78Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-16092","description":"Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).","status":"published","published":"2019-02-12T17:00:00Z","modified":"2024-09-16T17:18:38Z","updated_at":"2026-11-03T00:55:43.455642Z"}],"ghsa":[{"id":"GHSA-gj7v-j8r4-326v","title":"Registers used to store Modbus values can be read and written from the web interface without...","description":"Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).","status":"published","published":"2022-05-13T01:31:12Z","modified":"2023-01-31T21:31:28Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:49:32.359752Z"}],"nvd":[{"id":"CVE-2019-6533","description":"Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).","status":"published","published":"2019-02-12T17:29:00.4Z","modified":"2026-06-17T02:39:12.393Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:05:04.689371Z"}]}}