Unscored CVE-2018-17928 EUVD-2018-9669GHSA-qf28-rwjg-vr2r

The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing t…

Published Jan 31, 2019 · Updated Sep 17, 2024 · Assigned by icscert

Vendor: ABB Product: CMS-770 Category: ICS / OT

Description

The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism.

Affected products

Vendor	Product	Affected	Fixed
ABB	CMS-770	Software Versions 1.7.1 and prior.	—

Advisories 1

ICSA-18-352-06 ABB CMS-770 CISA ICS & IT advisories · Dec 18, 2018

References

106244 vdb-entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06