SB2018060601 - Multiple vulnerabilities in ABB IP Gateway

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Improper authentication (CVE-ID: CVE-2017-7931)

The vulnerability allows a remote attacker to bypass authentication on the target system.

The vulnerability exists due to improper authentication. A remote attacker can access a specific uniform resource locator (URL) on the web server, obtain the configuration files and application pages without authentication.

2) Cross-site request forgery (CVE-ID: CVE-2017-7906)

The vulnerability allows a remote attacker to perform CSRF attack.

The weakness exists due to insufficient CSRF protections. A remote attacker can create a specially crafted HTML page or URL, trick the victim into visiting it, gain access to the system and perform arbitrary actions.

3) Unprotected Storage of Credentials (CVE-ID: CVE-2017-7933)

The vulnerability allows a remote attacker to gain unauthorized access to the target system.

The vulnerability exists due to some configuration files contain passwords stored in plain-text. A remote attacker can obtain arbitrary data and gain unauthorized access to the system.

Remediation

Install update from vendor's website.

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01