Ics-Cert Abb Ip Gateway vulnerabilities
2 known vulnerabilities affecting ics-cert/abb_ip_gateway.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2017-7931CRITICALCVSS 9.8vAll versions prior to version 3.392018-06-06
CVE-2017-7931 [CRITICAL] CWE-287 CVE-2017-7931: In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web
In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.
cvelistv5nvd
CVE-2017-7906HIGHCVSS 8.8vAll versions prior to version 3.392018-06-06
CVE-2017-7906 [HIGH] CWE-352 CVE-2017-7906: In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was per
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
cvelistv5nvd