CVE-2019-6542

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

1.52%

Published

Mar 28, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060)_update_05032019-482 allows an unauthenticated user to initiate a remote reboot, which may be used to cause a denial of service condition.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-306CWE-306

Affected Products (6)

enttec · datagate_mk2_firmware (up to 70044_update_05032019-482)vulnerable

enttec · datagate_mk2

enttec · storm_24_firmware (up to 70050_update_05032019-482)vulnerable

enttec · storm_24

enttec · pixelator_firmware (up to 70060_update_05032019-482)vulnerable

enttec · pixelator

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-19-085-03-0

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-19-085-03-0

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs