CVE-2019-19105

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials

State: Published
Severity: 6.2 Medium
Published: Apr 22, 2020
Updated: Aug 5, 2024
Reserved: Nov 18, 2019

Description

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration's credentials in plaintext.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	ABB

Weaknesses

CWE-256 Unprotected Storage of Credentials

Affected Products

Product	Versions
TG/S 3.2 Telephone GatewayABB	2CDG 110 135 R0011Affected
6186/11 Telefon-GatewayBusch-Jaeger	2CKA006136A0187Affected

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.