CVE-2019-19106

ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues

State: Published
Severity: 9.1 Critical
Published: Apr 22, 2020
Updated: Aug 5, 2024
Reserved: Nov 18, 2019

Description

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	ABB

Weaknesses

CWE-264 Permissions, Privileges, and Access Controls

Affected Products

Product	Versions
TG/S 3.2 Telephone GatewayABB	2CDG 110 135 R0011Affected
6186/11 Telefon-GatewayBusch-Jaeger	2CKA006136A0187Affected

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.