Abb IP Gateway Firmware vulnerabilities

3 CVEs affecting Abb IP Gateway Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7933, published 2018-06-06.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-7931, published 2018-06-06. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without…
• CVE-2017-7933, published 2018-06-06. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access.
• CVE-2017-7906, published 2018-06-06. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating…