CVE-2017-7906CWE-352

CVE-2017-7906: vulnerability in ICS-CERT ABB IP GATEWAY

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
Related CVEs — ICS-CERT ABB IP GATEWAY

In the same product, most dangerous first.