Description (CNA)
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ICS-CERT / ABB IP GATEWAY | affected All versions prior to version 3.39 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.