CVE-2019-19106: ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-22 · updated 2026-06-17
Weakness: CWE-264

Description

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings.

Affected products

ABB Tg/S3.2 Firmware: all versions
Busch-Jaeger 6186/11 Firmware: all versions

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2019-19106 or the next vulnerability affects your stack