CVE-2017-7933

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...

CVE-2017-7933

CVE-2017-7933 affects ABB IP Gateway versions 3.39 and earlier. The vulnerability arises from passwords stored in plain-text in configuration files, enabling an attacker to gain unauthorized access over the network. The issue is categorized under unprotected storage of credentials (CWE-256) and i...

CVE-2017-7906

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user...

CVE-2017-7931

The CVE describes an authentication flaw in ABB IP Gateway (versions up to 3.39). Attackers could access configuration files and application pages without authentication by requesting a specific URL on the web server. The issue affects ABB IP Gateway, a building-management system, with the ICSA a...

CVE-2017-7906

The CVE-2017-7906 entry concerns ABB IP Gateway, versions 3.39 and earlier. The vulnerability is a Cross-Site Request Forgery (CSRF) in the web server, which does not sufficiently verify that a request is performed by the authenticated user, enabling an attacker to perform actions impersonating t...

ABB IP Gateway Cross-Site Request Forgery Vulnerability

ABB IP GATEWAY is a building management system from ABB Switzerland. ABB IP GATEWAY 3.39 and prior versions suffer from a cross-site request forgery vulnerability, which arises when the web server fails to adequately validate a request sent by a user. A remote attacker could use this vulnerabilit...

ABB Welcome IP-Gateway Detection

Detection of ABB Welcome IP-Gateway. The script sends a connection request to the server and attempts to detect ABB Welcome IP-Gateway and to extract its firmware version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

ABB IP Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: IP Gateway Vulnerabilities: Improper Authentication, Cross-site Request Forgery, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

Code injection

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7936

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

CVE-2015-7935

CVE-2015-7935 affects Motorola Solutions MOSCAD IP Gateway. A remote attacker can read arbitrary files via unspecified vectors (Remote File Inclusion), with CVSSv3 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The MOSCAD IP Gateway is web-based management software; the underlying issue is...

CVE-2015-7936

CVE-2015-7936: CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway’s web-based management enables remote attackers to hijack an administrator’s session to change a password. Affected product: MOSCAD IP Gateway (all versions) with web access; root cause described as CSRF without proper anti...

Cisco TelePresence IP Gateway Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence IP Gateway is a telepresence IP gateway device. A cross-site request forgery vulnerability exists in the Cisco TelePresence IP Gateway appliance that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the...

CVE-2015-4255

The CVE-2015-4255 issue concerns Cisco TelePresence IP Gateway devices. The vulnerability is a cross-site request forgery (CSRF) flaw in the Cisco TelePresence IP Gateway Series, due to insufficient CSRF protections, allowing an unauthenticated, remote attacker to hijack a user’s authenticated ac...

Cisco TelePresence IP Gateway Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco TelePresence IP Gateway Series could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the user of a web...

Legrand-003598 / Bticino-F454 Credential Disclosure

OVERVIEW Credential leaks lead to complete compromise of home automation system 2. BACKGROUND The 2 devices are identical, and act as an IP gateway between the SCS home automation bus, and an IP network. The devices uses https for the web-front, and is also open on port 20000 with an semi open...

Legrand-003598 / Bticino-F454 Credential Disclosure

Legrand-003598 / Bticino-F454 SCS web gateways both suffer from a remote credential disclosure vulnerability. Firmware 1.00.26 is affected. 1. OVERVIEW Credential leaks lead to complete compromise of home automation system 2. BACKGROUND The 2 devices are identical, and act as an IP gateway betwee...

Default credentials

The Cisco Video Surveillance IP Gateway Encoder/Decoder Standalone and Module firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decoder Software firmware 1.11.0 and earlier, and the Video Surveillance SP/ISP firmware 1.23.7 and earlier have default passwords for the sypixx and root user...