CVE-2017-7933: In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which ma...

Security readout for executives and security teams

CVE-2017-7933 describes ABB IP GATEWAY versions 3.39 and prior storing some passwords in plain text inside configuration files. If an attacker can read those files, they may gain unauthorized access. The public bundle does not provide CVSS scoring, detailed affected CPEs, or confirmed exploitation. Exposure is likely limited to environments running ABB IP GATEWAY 3.39 or earlier. Risk depends on whether attackers can access device configuration files or management interfaces. The bundle lists no CPEs, so asset matching requires local inventory confirmation. Prioritize inventory and vendor guidance review, especially in operational environments where gateway compromise could enable broader unauthorized access. Absence of CVSS and KEV evidence lowers certainty, not impact potential. Mitigation focus: Check ABB and CISA/ICS-CERT guidance for supported fixes or configuration actions.; Inventory ABB IP GATEWAY deployments and identify versions 3.39 or earlier.; Limit access to configuration files, backups, and device management interfaces..

Prepared

Jun 7, 2026, 06:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.