PT-2019-4282

Name of the Vulnerable Software and Affected Versions ABB Power Generation Information Manager PGIM and Plant Connect affected versions not specified Description The issue is related to insufficient protection of registration data, which may allow an attacker to remotely bypass authentication and...

CVE-2019-18250: Authentication Bypass Using an Alternate Path or Channel

In all versions of ABB Power Generation Information Manager PGIM and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device...

ABB Power Generation Information Manager (PGIM) and Plant Connect

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: Power Generation Information Manager PGIM and Plant Connect Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this...