6186/11_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/6186-11_firmware/ Sun, 26 Feb 2023 06:31:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png 6186/11_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/6186-11_firmware/ 32 32 CVE-2019-19104 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19104/ Sun, 26 Feb 2023 06:31:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19104/ The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (URL) , violating the access-control (ACL) rules. This issue allows obtaining sensitive information that may aid in further attacks and privilege escalation.

The post CVE-2019-19104 appeared first on CVE Vulnerability.

]]> The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (URL) , violating the access-control (ACL) rules. This issue allows obtaining sensitive information that may aid in further attacks and privilege escalation.

The post CVE-2019-19104 appeared first on CVE Vulnerability.

]]> CVE-2019-19105 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19105/ Sun, 26 Feb 2023 06:31:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19105/ The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration’s credentials in plaintext.

The post CVE-2019-19105 appeared first on CVE Vulnerability.

]]> The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration’s credentials in plaintext.

The post CVE-2019-19105 appeared first on CVE Vulnerability.

]]> CVE-2019-19106 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19106/ Sun, 26 Feb 2023 06:31:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19106/ Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.

The post CVE-2019-19106 appeared first on CVE Vulnerability.

]]> Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.

The post CVE-2019-19106 appeared first on CVE Vulnerability.

]]> CVE-2019-19107 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19107/ Sun, 26 Feb 2023 06:31:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19107/ The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).

The post CVE-2019-19107 appeared first on CVE Vulnerability.

]]> The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).

The post CVE-2019-19107 appeared first on CVE Vulnerability.

]]>