{"cvss":0.0,"datePublished":"2019-12-17T00:00:00Z","dateUpdated":"2019-12-17T00:00:00Z","description":"An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file (which contains data such as usernames, passwords, and other sensitive RTU data).","dueDate":"","id":"CVE-2019-14927","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"smartrtu_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"mitsubishielectric smartrtu_firmware Missing Authentication for Critical Functionality","vendor":"mitsubishielectric"}