CVE-2019-14925

6.5 mediumEPSS 1.3%

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read sensitive configuration settings such as usernames, passwords, and other sensitive RTU data due to insecure permission assignment.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2019-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

inea:me-rtu_firmware
mitsubishielectric:smartrtu_firmware

References

https://www.mogozobo.com/
https://www.mogozobo.com/?p=3593
https://www.mogozobo.com/
https://www.mogozobo.com/?p=3593

Check your stack JSON