CVE-2019-19107
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| ABB | TG/S 3.2 Telephone Gateway | 2CDG 110 135 R0011 | affected |
| Busch-Jaeger | 6186/11 Telefon-Gateway | 2CKA006136A0187 | affected |
Weaknesses
- CWE-264: CWE-264 Permissions, Privileges, and Access Controls
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.