CVE-2019-18250

In all versions of ABB Power Generation Information Manager PGIM and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device...

The vulnerability of the software for collecting, archiving, and analyzing data from Power Generation Information Manager and Plant Connect systems lies in the insufficient protection of registration data. This allows attackers to bypass authentication procedures and gain access to the device’s accounting data.

The vulnerability of the Power Generation Information Manager and Plant Connect software in terms of data collection, archiving, and analysis is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and...