EUVD-2017-16902

Malware in sbrugna...

EUVD-2017-16904

Malware in sbrugna...

EUVD-2017-16877

Malware in sbrugna...

CVE-2017-7931

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator URL on the web server, a malicious user is able to access the configuration files and application pages without authentication...

CVE-2017-7906

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

Cross site request forgery (csrf)

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

Design/Logic Flaw

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

CVE-2017-7933

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

CVE-2017-7931

The CVE describes an authentication flaw in ABB IP Gateway (versions up to 3.39). Attackers could access configuration files and application pages without authentication by requesting a specific URL on the web server. The issue affects ABB IP Gateway, a building-management system, with the ICSA a...

CVE-2017-7931

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator URL on the web server, a malicious user is able to access the configuration files and application pages without authentication...

CVE-2017-7933

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

PT-2018-8432

Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description The issue concerns configuration files that store passwords in plain-text, potentially allowing an attacker to gain unauthorized access. Recommendations For ABB IP GATEWAY versions 3.39 and...

PT-2018-8431

Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description A malicious user can access configuration files and application pages without authentication by accessing a specific uniform resource locator URL on the web server. Recommendations For ABB IP...

ABB IP Gateway Cross-Site Request Forgery Vulnerability

ABB IP GATEWAY is a building management system from ABB Switzerland. ABB IP GATEWAY 3.39 and prior versions suffer from a cross-site request forgery vulnerability, which arises when the web server fails to adequately validate a request sent by a user. A remote attacker could use this vulnerabilit...

CVE-2017-7933: Insufficiently Protected Credentials

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

PT-2018-8429

Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description The issue arises from insufficient verification by the web server that a request was performed by the authenticated user. This may allow an attacker to launch a request impersonating that user...

CVE-2017-7906: Cross-Site Request Forgery (CSRF)

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

CVE-2017-7931: Improper Authentication

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator URL on the web server, a malicious user is able to access the configuration files and application pages without authentication...