CVE-2017-7933: Insufficiently Protected Credentials

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

PT-2018-8429

Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description The issue arises from insufficient verification by the web server that a request was performed by the authenticated user. This may allow an attacker to launch a request impersonating that user...

PT-2018-8431

Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description A malicious user can access configuration files and application pages without authentication by accessing a specific uniform resource locator URL on the web server. Recommendations For ABB IP...

ABB IP Gateway Cross-Site Request Forgery Vulnerability

ABB IP GATEWAY is a building management system from ABB Switzerland. ABB IP GATEWAY 3.39 and prior versions suffer from a cross-site request forgery vulnerability, which arises when the web server fails to adequately validate a request sent by a user. A remote attacker could use this vulnerabilit...

CVE-2017-7906: Cross-Site Request Forgery (CSRF)

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

ABB Welcome IP-Gateway Detection

Detection of ABB Welcome IP-Gateway. The script sends a connection request to the server and attempts to detect ABB Welcome IP-Gateway and to extract its firmware version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

PT-2018-8432

Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description The issue concerns configuration files that store passwords in plain-text, potentially allowing an attacker to gain unauthorized access. Recommendations For ABB IP GATEWAY versions 3.39 and...

ABB IP Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: IP Gateway Vulnerabilities: Improper Authentication, Cross-site Request Forgery, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

Code injection

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7936

CVE-2015-7936: CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway’s web-based management enables remote attackers to hijack an administrator’s session to change a password. Affected product: MOSCAD IP Gateway (all versions) with web access; root cause described as CSRF without proper anti...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7936

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

CVE-2015-7935

CVE-2015-7935 affects Motorola Solutions MOSCAD IP Gateway. A remote attacker can read arbitrary files via unspecified vectors (Remote File Inclusion), with CVSSv3 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The MOSCAD IP Gateway is web-based management software; the underlying issue is...

CVE-2015-7935: Exposure of Sensitive Information to an Unauthorized Actor

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7936: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

PT-2015-7680

Name of the Vulnerable Software and Affected Versions MOSCAD IP Gateway affected versions not specified Description The issue allows remote attackers to read arbitrary files. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2015-7681

Name of the Vulnerable Software and Affected Versions MOSCAD IP Gateway affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify a password. This can be achieved through...

Cisco TelePresence IP Gateway Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence IP Gateway is a telepresence IP gateway device. A cross-site request forgery vulnerability exists in the Cisco TelePresence IP Gateway appliance that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the...

CVE-2015-4255

The CVE-2015-4255 issue concerns Cisco TelePresence IP Gateway devices. The vulnerability is a cross-site request forgery (CSRF) flaw in the Cisco TelePresence IP Gateway Series, due to insufficient CSRF protections, allowing an unauthenticated, remote attacker to hijack a user’s authenticated ac...