CVE-2017-7931

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/104388 VDB Entry Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:abb:ip_gateway_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ip_gateway:-:*:*:*:*:*:*:*

Information

Published : 2018-06-06 13:29

Updated : 2019-10-09 16:30


NVD link : CVE-2017-7931

Mitre link : CVE-2017-7931


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

abb

  • ip_gateway
  • ip_gateway_firmware