PT-2020-10049
CVE-2019-19107
·
تاريخ النشر
2020-04-22
·
تاريخ التحديث
2021-11-03
الوصف من
CVSS 3.1
6.2
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
ABB Telephone Gateway TG/S version 3.2
Busch-Jaeger 6186/11 Telefon-Gateway (affected versions not specified)
Description
The issue concerns the Configuration pages in the affected software, where user profiles and services transfer passwords in plaintext, even though the passwords are hidden when displayed.
Recommendations
For ABB Telephone Gateway TG/S version 3.2, consider restricting access to the Configuration pages until a fix is available.
For Busch-Jaeger 6186/11 Telefon-Gateway, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾