Skip to content
OpenAdvisories
Critical ICSA-18-156-01 3 CVEs

ABB IP Gateway

Published Jun 5, 2018 · Updated Jun 5, 2018

Vendor: ABB Product: IP Gateway

Summary

Successful exploitation of these vulnerabilities could allow attackers to perform actions using administrative privileges.

Vulnerabilities 3

  • Unscored —
    CVE-2017-7906

    In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authe…

    ICS-CERT ABB IP GATEWAY
  • Unscored —
    CVE-2017-7931

    In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious…

    ICS-CERT ABB IP GATEWAY
  • Unscored —
    CVE-2017-7933

    In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an a…

Revision history

  1. #1

    ICSA-18-156-01 ABB IP Gateway

References