CVE-2019-9590 in T-920 PLC

Summary

by MITRE

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service (persistent failure mode) by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 (aka UID 0x43) requests to TCP port 502.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/06/2019
• Moderation: accepted
• Entry: VDB-131378
• CPE: ready
• CWE: CWE-20 (confirmed)
• CVSS: 7.5 (NVD)
• EPSS: 0.00650
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-9590
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-9590
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-9590/