CVE-2019-18250

2019-11-2523:13:29

CWE-288

icscert

www.cve.org

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device.

CNA Affected

[
  {
    "product": "ABB Power Generation Information Manager (PGIM) and Plant Connect All Versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ABB Power Generation Information Manager (PGIM) and Plant Connect All Versions"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-318-05