CVE-2019-19106

Katalog CVE

CVSS 9.1 · Critical EPSS 1,3%

Kerentanan Permissions, Privileges, and Access Controls pada abb tg/s3.2 firmware, busch-jaeger 6186/11 firmware. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.

Rincian

Terbit di NVD

22 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-264: Permissions, Privileges, and Access Controls

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action... advisory vendor