9.1
Critical
CVE-2019-19106 Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway…
Description
Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TG/S 3.2 Telephone Gateway | Versions not published | |
| 6186/11 Telefon-Gateway | 2CKA006136A0187 | No fix stated |
Other CVEs of TG/S 3.2 Telephone Gateway
The 4 CVEs of TG/S 3.2 Telephone Gateway →
CVE-2019-19107
The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and…
6.2
Medium
CVE-2019-19105
The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current…
6.2
Medium
CVE-2019-19104
The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different…
9.1
Critical