PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family,...

8.8 CVSS

Vulnerability Description

PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Smart Telecontrol Unit TCG Versions 5.0.27, 5.1.19, 6.0.16 and prior, and IEC104 Security Proxy Version 2.2.10 and prior The web application browser interprets input as active HTML, JavaScript, or VBScript, which could allow an attacker to execute arbitrary code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6528

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from ICS-CERT

View All →

CVE-2019-6565

Moxa IKS and EDS fails to properly validate user input,...

Medium 6.1

CVE-2019-6563

Moxa IKS and EDS generate a predictable cookie calculated with...

Critical 9.8

CVE-2019-6561

Cross-site request forgery has been identified in Moxa IKS and...

High 8.8

CVE-2019-6559

Moxa IKS and EDS allow remote authenticated users to cause...

Medium 6.5

CVE-2019-6557

Several buffer overflow vulnerabilities have been identified in Moxa IKS...

Critical 9.8

Affected Vendor

ICS-CERT

View all reports →

Affected Software

PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy.

Vulnerable Versions:

Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Smart Telecontrol Unit TCG Versions 5.0.27, 5.1.19, 6.0.16 and prior, and IEC104 Security Proxy Version 2.2.10 and prior.