Read the docs

Busch-Jaeger

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Busch-Jaeger records in CISA KEV

No Busch-Jaeger vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
6186/11 Firmware 4 records MEDIUM Mybusch-jaeger 1 record MEDIUM

Records

4 records in 6186/11 Firmware · all components

TI-2019-13786 CVE-2019-19104 · GHSA-5x7j-64fm-ggfp

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control

Priority MEDIUM 45

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (U…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01408 Published 2020-04-22 No fix listed CWE-287
TI-2019-13788 CVE-2019-19106 · GHSA-9pjg-849f-5mp3

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues

Priority MEDIUM 42

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profil…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01333 Published 2020-04-22 No fix listed CWE-264
TI-2019-13789 CVE-2019-19107 · GHSA-4f8j-fccm-mr22

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure

Priority LOW 27

The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00226 Published 2020-04-22 No fix listed CWE-264
TI-2019-13787 CVE-2019-19105 · GHSA-fv5w-qgvv-978m

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials

Priority LOW 27

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other co…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00298 Published 2020-04-22 No fix listed CWE-256
Open these records in search →