CVE-2019-18250
Summary
| CVE | CVE-2019-18250 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-11-26 00:15:00 UTC |
| Updated | 2021-10-29 19:11:00 UTC |
| Description | In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Abb | Plant Connect | All | All | All | All |
| Application | Abb | Plant Connect | All | All | All | All |
| Application | Abb | Power Generation Information Manager | All | All | All | All |
| Application | Abb | Power Generation Information Manager | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ABB Power Generation Information Manager (PGIM) and Plant Connect - IoT Security News | MISC | iotsecuritynews.com | Third Party Advisory |
| ABB Power Generation Information Manager (PGIM) and Plant Connect | CISA | MISC | www.us-cert.gov | Not Applicable, Permissions Required |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.