ICSA-19-036-05
·
Published 2019-02-28
·
View on CISA ICS-CERT ↗
Kunbus PR100088 Modbus Gateway (Update B)
CVSS 10.0
CRITICAL
Risk Summary
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and/or cause a denial-of-service condition.
Remediations
- Update to Version R03: the updated file can be downloaded from here (Install instructions can be found in the readme file included in the download): https://www.kunbus.de/sicherheitshinweise/update-ii-sicherheitshinweis-f%C3%BCr-gateway-modul-modbus-tcp-slave-art-nr-100088.html?file=files/media/bugfixes/SU_100088_R03.zip
- These devices are not intended to be used in a public network. Rather, these devices are intended for use in an industrial environment with a protected network architecture.
Affected Vendors
Kunbus
Affected Products (1)
Kunbus
·
PR100088 Modbus gateway
< R02 (or Software Version 1.1.13166)
Affected Sectors
Communications
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more