CVE-2018-18995
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing configuration settings such as IP addresses.
Ninguna versión de los dispositivos Pluto Safety PLC Gateway Ethernet ABB GATE-E1 y GATE-E2permite la configuración de la autenticación en interfaces del administrador telnet o web, lo que podría habilitar varios vectores de efectos, incluyendo el restablecimiento de dispositivos, la lectura o modificación de registros y el cambio de los ajustes de configuración, como pueden ser las direcciones IP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-11-06 CVE Reserved
- 2019-01-03 CVE Published
- 2024-05-26 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-306: Missing Authentication for Critical Function
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/106247 | Third Party Advisory | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01 | Mitigation |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Abb Search vendor "Abb" | Gate-e1 Firmware Search vendor "Abb" for product "Gate-e1 Firmware" | * | - |
Affected
| in | Abb Search vendor "Abb" | Gate-e1 Search vendor "Abb" for product "Gate-e1" | - | - |
Safe
|
| Abb Search vendor "Abb" | Gate-e2 Firmware Search vendor "Abb" for product "Gate-e2 Firmware" | * | - |
Affected
| in | Abb Search vendor "Abb" | Gate-e2 Search vendor "Abb" for product "Gate-e2" | - | - |
Safe
|