Vulnerabilities > ABB > High

DATE CVE VULNERABILITY TITLE RISK
2018-06-06 CVE-2017-7906 Cross-Site Request Forgery (CSRF) vulnerability in ABB IP Gateway Firmware 3.39
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
network
low complexity
abb CWE-352
8.8
2017-08-07 CVE-2017-7920 Improper Authentication vulnerability in ABB Vsn300 Firmware and Vsn300 for React Firmware
An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior.
network
low complexity
abb CWE-287
7.5
2016-03-18 CVE-2016-2281 Permissions, Privileges, and Access Controls vulnerability in ABB Panel Builder 800 5.1
Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
local
high complexity
abb CWE-264
7.2