CVE-2017-7931

CWE-287 — Improper Authentication3 documents3 sources
Severity
9.8CRITICAL
EPSS
1.2%
top 21.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ABB IP Gateway FirmwareIcs-cert ABB IP Gateway
Timeline
PublishedJun 6
Latest updateMay 13

Description

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ics-cert/abb_ip_gatewayAll versions prior to version 3.39

🔴Vulnerability Details

2
GHSA
GHSA-653w-pq3p-5w5m: In ABB IP GATEWAY 3↗2022-05-13
▶
CVEList
CVE-2017-7931: In ABB IP GATEWAY 3↗2018-06-06
▶
CVE-2017-7931 (CRITICAL CVSS 9.8) | In ABB IP GATEWAY 3.39 and prior | cvebase.io