Description (CNA)
An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access internal information about status and connected devices without authenticating.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / ABB VSN300 WiFi Logger Card | affected ABB VSN300 WiFi Logger Card |
CWE
CWE-287
References
- http://www.securityfocus.com/bid/99558
- http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch
- https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03
ADP enrichment
No English description supplied.