VULNERABILITY INTELLIGENCE

CVE-2019-18250

CVSS score9.8 CRITICAL

EPSS probability1.68%

CISA KEVNot currently listed

Published2019-11-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device.

Weakness classification

ics-cert@hq.dhs.gov: CWE-288
nvd@nist.gov: CWE-287

Primary references

ics-cert@hq.dhs.gov — Not Applicable, Permissions Required, Third Party Advisory, US Government Resource
nvd@nist.gov — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Permissions Required, Third Party Advisory, US Government Resource