Description
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ICS-CERT | ABB IP GATEWAY | All versions prior to version 3.39 | — |
Advisories 1
- ICSA-18-156-01 ABB IP Gateway CISA ICS & IT advisories · Jun 5, 2018