ICS CERT ABB IP Gateway vulnerabilities

2 vulnerabilities

Known vulnerabilities in ICS CERT ABB IP Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2017-7906abbip_gateway_firmware+1
EPSS score
0.65%
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.9.8CVE-2017-7931abbip_gateway_firmware+1
EPSS score
2.51%
In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.