What’s Vulnerable › Vulnerabilities

CVE-2019-14929

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-28 · updated 2026-06-17
• Weakness: CWE-522

Description

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords could allow an unauthenticated attacker to obtain configured username and password combinations on the RTU due to the weak credentials management on the RTU. An unauthenticated user can obtain the exposed password credentials to gain access to the following services: DDNS service, Mobile Network Provider, and OpenVPN service.

Affected products

• INEA Me-Rtu Firmware: through 3.0
• Mitsubishielectric Smartrtu Firmware: through 2.02

References

• https://www.mogozobo.com/
• https://www.mogozobo.com/?p=3593
• https://www.mogozobo.com/
• https://www.mogozobo.com/?p=3593

Get alerted when CVE-2019-14929 or the next vulnerability affects your stack