ABB Telephone Gateway TG/S和Busch-Jaeger Telefon-Gateway授权问题漏洞 漏洞详情

漏洞类型: 授权问题

危险级别: 高危

CVE编号: CVE-2019-19104

CNVD编号: CNVD-2020-25008

CNNVD编号: CNNVD-202004-1900

发布时间: 2020-04-22

CVSS评分: 9.4346745024

tg/s3.2_firmware -

6186/11_firmware -

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (URL) , violating the access-control (ACL) rules. This issue allows obtaining sensitive information that may aid in further attacks and privilege escalation.

1. 据厂商提供的信息，该产品已停止更新，相关信息请随时关注厂商主页： https://new.abb.com/ 据厂商提供的信息，该产品已停止更新，相关信息请随时关注厂商主页： https://new.abb.com/