CVE-2018-17926

MEDIUM

ABB ETH-FW Firmware < 1.01 and FW Firmware < 2.22 - Unauthenticated Arbitrary File Upload via Language File Bypass

Title source: llm

Description

The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106243

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-18-352-07

Scores

CVSS v3 4.3

EPSS 0.0027

EPSS Percentile 50.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-287

Status published

Products (2)

abb/eth-fw_firmware < 1.01

abb/fw_firmware < 2.22

Published Jan 31, 2019

Tracked Since Feb 18, 2026