CVE-2017-7933

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

CVE-2017-7906

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

CVE-2017-7931

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator URL on the web server, a malicious user is able to access the configuration files and application pages without authentication...

CVE-2017-7933

CVE-2017-7933 affects ABB IP Gateway versions 3.39 and earlier. The vulnerability arises from passwords stored in plain-text in configuration files, enabling an attacker to gain unauthorized access over the network. The issue is categorized under unprotected storage of credentials (CWE-256) and i...

CVE-2017-7906

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

CVE-2017-7933

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

CVE-2017-7906

The CVE-2017-7906 entry concerns ABB IP Gateway, versions 3.39 and earlier. The vulnerability is a Cross-Site Request Forgery (CSRF) in the web server, which does not sufficiently verify that a request is performed by the authenticated user, enabling an attacker to perform actions impersonating t...

CVE-2017-7931

The CVE describes an authentication flaw in ABB IP Gateway (versions up to 3.39). Attackers could access configuration files and application pages without authentication by requesting a specific URL on the web server. The issue affects ABB IP Gateway, a building-management system, with the ICSA a...

CVE-2017-7931

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator URL on the web server, a malicious user is able to access the configuration files and application pages without authentication...

ABB IP Gateway Unauthorized Access Vulnerability

ABB IP GATEWAY is a building management system from ABB Switzerland. A security vulnerability exists in ABB IP GATEWAY version 3.39 and earlier. The vulnerability can be exploited by an attacker to gain unauthenticated access to configuration files or application pages via a specially crafted URL...

ABB IP Gateway Cross-Site Request Forgery Vulnerability

ABB IP GATEWAY is a building management system from ABB Switzerland. ABB IP GATEWAY 3.39 and prior versions suffer from a cross-site request forgery vulnerability, which arises when the web server fails to adequately validate a request sent by a user. A remote attacker could use this vulnerabilit...

ABB Welcome IP-Gateway Detection

Detection of ABB Welcome IP-Gateway. The script sends a connection request to the server and attempts to detect ABB Welcome IP-Gateway and to extract its firmware version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

ABB IP Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: IP Gateway Vulnerabilities: Improper Authentication, Cross-site Request Forgery, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these...

Authorization

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

CVE-2017-9664 affects ABB SREA-01 (revisions A/B/C; up to 3.31.5) and SREA-50 (revision A; up to 3.32.8). Vulnerability: Relative Path Traversal via HTTP using ../../ to read internal files (password hash exposure) and, after authorization, an exploit to run commands. Impact: remote attacker may ...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

ABB MicroSCADA Detection (Windows SMB Login)

Detects the installed version of ABB MicroSCADA on Windows. The script logs in via smb, searches for MicroSCADA in the registry and gets the version from registry. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

ABB MicroSCADA Installation Elevation of Privilege Vulnerability

ABB MicroSCADA is a suite of substation monitoring and control software from ABB Switzerland, developed specifically for power transmission and distribution systems. The software includes a human-machine interface MMI and flexible application engineering tools, and provides monitoring, event...