CVE-2019-16879

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function (CWE-306) vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or perform other malicious activities.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.us-cert.gov/ics/advisories/icsa-20-042-01Third Party Advisory, US Government Resource
https://www.us-cert.gov/ics/advisories/icsa-20-042-01Third Party Advisory, US Government Resource

Timeline

Published: Apr 14, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-16887.1A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to ga CVE-2019-168809.8An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method.CVE-2019-168819.8An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution CVE-2019-168827.5An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated wit CVE-2019-168847.5runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/roo CVE-2019-168859.8In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted co CVE-2019-168877.8In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc.CVE-2019-168897.5Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/r CVE-2019-16897.3A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary fil CVE-2019-168905.4Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.CVE-2019-168919.8Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.CVE-2019-168925.5In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be