CVE-2019-14926

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow an attacker to gain unauthorised access or disclose encrypted data on the RTU due to the keys not being regenerated on initial installation or with firmware updates. In other words, these devices use private-key values in /etc/ssh/ssh_host_rsa_key, /etc/ssh/ssh_host_ecdsa_key, and /etc/ssh/ssh_host_dsa_key files that are publicly available from the vendor web sites.

• CWE-798

• https://www.mogozobo.com/Third Party Advisory
• https://www.mogozobo.com/?p=3593Exploit, Third Party Advisory
• https://www.mogozobo.com/Third Party Advisory
• https://www.mogozobo.com/?p=3593Exploit, Third Party Advisory

Published

Oct 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14919An exposed Telnet Service on the Billion Smart Energy Router…7.8
• CVE-2019-1492Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14920Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allow…8.8
• CVE-2019-14923EyesOfNetwork 5.1 allows Remote Command Execution via shell …
• CVE-2019-14924An issue was discovered in GCDWebServer before 3.5.3. The me…
• CVE-2019-14925An issue was discovered on Mitsubishi Electric Europe B.V. M…6.5
• CVE-2019-14927An issue was discovered on Mitsubishi Electric Europe B.V. M…7.5
• CVE-2019-14928An issue was discovered on Mitsubishi Electric Europe B.V. M…5.4
• CVE-2019-14929An issue was discovered on Mitsubishi Electric Europe B.V. M…9.8
• CVE-2019-1493Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14930An issue was discovered on Mitsubishi Electric Europe B.V. M…9.8
• CVE-2019-14931An issue was discovered on Mitsubishi Electric Europe B.V. M…9.8