Abb Ip Gateway Firmware vulnerabilities

CVE-2017-7931 [CRITICAL] CWE-287 CVE-2017-7931: In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.

CVE-2017-7933 [CRITICAL] CWE-522 CVE-2017-7933: In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, w In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access.

CVE-2017-7906 [HIGH] CWE-352 CVE-2017-7906: In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was per In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.