CVE-2019-19105

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration's credentials in plaintext.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:abb:tg\/s3.2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:tg\/s3.2:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:busch-jaeger:6186\/11_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:busch-jaeger:6186\/11:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:34

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : 5.5
v2 : 2.1
v3 : 6.2
References () https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory () https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory

Information

Published : 2020-04-22 15:15

Updated : 2024-11-21 04:34


NVD link : CVE-2019-19105

Mitre link : CVE-2019-19105

CVE.ORG link : CVE-2019-19105


JSON object : View

Products Affected

abb

  • tg\/s3.2
  • tg\/s3.2_firmware

busch-jaeger

  • 6186\/11_firmware
  • 6186\/11
CWE
CWE-256

Plaintext Storage of a Password

CWE-522

Insufficiently Protected Credentials