Authentication flaw

Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing...

PT-2019-9694

Name of the Vulnerable Software and Affected Versions Pluto Safety PLC Gateway Ethernet devices in ABB GATE-E1 and GATE-E2 all versions Description The issue allows an unauthenticated attacker to insert an HTML/Javascript payload into device properties using the administrative web interface. This...

PT-2019-9692

Name of the Vulnerable Software and Affected Versions Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions Description The issue concerns the lack of authentication configuration on administrative telnet or web interfaces, which could enable various attack vectors. This...

CVE-2018-18995: Missing Authentication for Critical Function

Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing...