CVE-2017-7931 In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without aut...
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ABB ip gateway firmware | <= 3.39 | No fix listed |
| ICS-CERT ABB IP GATEWAY | = All versions prior to version 3.39 | No fix listed |
References
- 104388 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource