Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Busch-Jaeger Component: Mybusch-jaeger Clear all filters
TI-2021-05252 CVE-2021-22272 · GHSA-m839-458p-p487

ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.

Priority MEDIUM 41

The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00657 Published 2021-09-27 Fixed in 2021-05-03 CWE-200