PT-2020-10049 · Busch Jaeger+1 · Busch-Jaeger 6186/11 Telefon-Gateway+1

Published 2020-04-22 · Updated 2021-11-03 · CVE-2019-19107

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway (affected versions not specified)

Description The issue concerns the Configuration pages in the affected software, where user profiles and services transfer passwords in plaintext, even though the passwords are hidden when displayed.

Recommendations For ABB Telephone Gateway TG/S version 3.2, consider restricting access to the Configuration pages until a fix is available. For Busch-Jaeger 6186/11 Telefon-Gateway, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

CWE-264

Related Identifiers

CVE-2019-19107

Affected Products

Abb Telephone Gateway Tg/S

Busch-Jaeger 6186/11 Telefon-Gateway

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-19107 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory