{"id":"CVE-2019-14927","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-14927","generatedAt":"2026-10-29T00:58:48.810Z","title":"An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file (which contains data such as usernames, passwords, and other sensitive RTU data).","description":"An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file (which contains data such as usernames, passwords, and other sensitive RTU data).","published":"2019-10-28T13:15:11.000Z","lastModified":"2026-06-17T02:19:20.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-306","CWE-425"],"affected":["mitsubishielectric/smartrtu firmware","inea/me-rtu firmware"],"epss":{"score":0.4088,"percentile":0.9865,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2019-08-12","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":47234,"kind":"exploit","title":"Mitsubishi Electric smartRTU / INEA ME-RTU - Unauthenticated Configuration Download","url":"https://www.exploit-db.com/exploits/47234","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/47234.py","file":"exploits/php/webapps/47234.py","published":"2019-08-12","added":"2019-08-12","updated":"2019-08-14","author":"xerubus","type":"webapps","platform":"php","port":80,"verified":false,"codes":["CVE-2019-14927"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 40.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://www.mogozobo.com/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.mogozobo.com/?p=3593","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.mogozobo.com/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mogozobo.com/?p=3593","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-14927","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}