CVE-2019-19106: ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues

Published Apr 22, 2020

Updated

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.

Affected Software

4 affected components

ABB Tg\/s3.2 Firmware

ABB Tg\/s3.2

busch-jaeger 6186\/11 Firmware

busch-jaeger 6186\/11

Event History

Apr 22, 2020

CVE Published

via MITRE·02:37 PM

Data Sourced

via MITRE·02:37 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-19106?

CVE-2019-19106 is a vulnerability related to the improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway.

What is the severity of CVE-2019-19106?

CVE-2019-19106 has a severity rating of 9.1 (critical).

Which software is affected by CVE-2019-19106?

ABB Telephone Gateway TG/S 3.2 firmware and Busch-Jaeger 6186/11 Firmware are affected by CVE-2019-19106.

What can an unauthorized user do with CVE-2019-19106?

An unauthorized user can access data marked as restricted, such as viewing or editing user profiles and application settings.

How can I fix CVE-2019-19106?

To fix CVE-2019-19106, it is recommended to apply the security patches provided by the software vendors.