Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Busch-Jaeger Component: 6186/11 Firmware Clear all filters
TI-2019-13789 CVE-2019-19107 · GHSA-4f8j-fccm-mr22

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure

Priority LOW 27

The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00226 Published 2020-04-22 No fix listed CWE-264
TI-2019-13788 CVE-2019-19106 · GHSA-9pjg-849f-5mp3

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues

Priority MEDIUM 42

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profil…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01333 Published 2020-04-22 No fix listed CWE-264
TI-2019-13787 CVE-2019-19105 · GHSA-fv5w-qgvv-978m

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials

Priority LOW 27

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other co…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00298 Published 2020-04-22 No fix listed CWE-256
TI-2019-13786 CVE-2019-19104 · GHSA-5x7j-64fm-ggfp

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control

Priority MEDIUM 45

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (U…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01408 Published 2020-04-22 No fix listed CWE-287