CVE-2019-19107

Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway (affected versions not specified)

Description The issue concerns the Configuration pages in the affected software, where user profiles and services transfer passwords in plaintext, even though the passwords are hidden when displayed.

Recommendations For ABB Telephone Gateway TG/S version 3.2, consider restricting access to the Configuration pages until a fix is available. For Busch-Jaeger 6186/11 Telefon-Gateway, at the moment, there is no information about a newer version that contains a fix for this vulnerability.