CVE-2019-14927

7.5 highEPSS 41%

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file (which contains data such as usernames, passwords, and other sensitive RTU data).

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 41% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWEs: CWE-306, CWE-425
Published: 2019-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

inea:me-rtu_firmware
mitsubishielectric:smartrtu_firmware

References

https://www.mogozobo.com/
https://www.mogozobo.com/?p=3593
https://www.mogozobo.com/
https://www.mogozobo.com/?p=3593

Check your stack JSON