[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNhoU_u_2_LLUnlePjR1DM80ipHVx_vhtqI_qYtzjH58":3,"g5a-risk:CVE-2019-7226":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":74,"weaknesses":75,"weaknessesCount":84,"isActivelyExploited":85,"cisaInfo":26,"otxData":26,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":127,"notableEvents":128},"CVE-2019-7226","What is CVE-2019-7226?","The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, \u002Fcgi\u002FloginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the username and cleartext password of the user. An attacker can then supply an IDALToken value in a cookie, which will allow them to perform privileged operations such as restarting the service with \u002Fcgi\u002Frestart. A GET request to \u002Fcgi\u002FloginDefaultUser may result in \"1 #S_OK IDALToken=532c8632b86694f0232a68a0897a145c admin admin\" or a similar response.","The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged function...","2019-06-27T16:15:12.15","2022-11-30T21:40:13.73",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",5.8,"MEDIUM",6.5,6.4,0.0526,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"abb","pb610_panel_builder_600_firmware","*","cpe:2.3:o:abb:pb610_panel_builder_600_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"pb610_panel_builder_600","-","cpe:2.3:h:abb:pb610_panel_builder_600:-:*:*:*:*:*:*:*",2,[54,61,66,70],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F153402\u002FABB-IDAL-HTTP-Server-Authentication-Bypass.html","Packetstormsecurity",[58,59,60],"Exploit","Third Party Advisory","VDB Entry",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FJun\u002F39","Seclists",[58,65,59],"Mailing List",{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108886","Securityfocus",[59,60],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fwww.darkmatter.ae\u002Fxen1thlabs\u002Fabb-idal-http-server-authentication-bypass-vulnerability-xl-19-010\u002F","Darkmatter",[58,59],4,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2019-7226? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-7226, a high severity cyber security vulnerability from 2019. The ABB IDAL HTTP server CGI interface contains a URL that a...","CVE-2019-7226, CVE-2019-7226 vulnerability, CVE-2019-7226 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, abb security, pb610_panel_builder_600_firmware vulnerability, pb610_panel_builder_600 vulnerability","\u002Fwhat-is\u002Fcve-2019-7226",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-7226","Cybersecurity","CVE-2019-7226, CVE-2019-7226 vulnerability, CVE-2019-7226 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":114,"Negate":26,"Nodes":115},"AND",[116,123],{"Operator":117,"Negate":26,"CPEMatch":118},"OR",[119],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":121,"VersionEndExcluding":26,"VersionEndIncluding":122},"6C8196F7-A7BA-46FA-98E0-F0A261C18FFC","1.91","2.8.0.367",{"Operator":117,"Negate":26,"CPEMatch":124},[125],{"Vulnerable":26,"Criteria":51,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"992F7F8C-DDBB-4BA7-95B1-86CD40B173DB",[],[],{"lastModified":11,"cacheTime":130,"version":32},1792382322117,{"score":132,"band":133,"action":134,"scoredAt":135},50,"Medium","Plan remediation","2026-10-16T06:46:22.637673+00:00"]