What is CVE-2018-19009?

CVE-2018-19009 is a high-severity vulnerability in Pilz Pnozmulti Configurator, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.8/10. Published 2019-01-25.

How severe is CVE-2018-19009?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Pilz Pnozmulti Configurator

CVE-2018-19009

Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker with access to this sensitive data and physical access to the PMI m107 diag can modify data on the HMI device.

EPSS: 0.002 (15.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Pilz Pnozmulti Configurator — versions All versions prior to version 10.9
Pilz Pnozmulti_configurator

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-19009?: CVE-2018-19009 is a high-severity vulnerability in Pilz Pnozmulti Configurator, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.8/10. Published 2019-01-25.
How severe is CVE-2018-19009?: High severity. CVSS v3 base score is 7.8 out of 10.