Abb tg/s3.2 Firmware vulnerabilities

4 CVEs affecting Abb tg/s3.2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19107, published 2020-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19104, published 2020-04-22. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific…
CVE-2019-19106, published 2020-04-22. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing…
CVE-2019-19105, published 2020-04-22. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user…
CVE-2019-19107, published 2020-04-22. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).