CVE-2018-18995

Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing configuration settings such as IP addresses.

• CWE-306
• CWE-306

• http://www.securityfocus.com/bid/106247Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/106247Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01Mitigation, Third Party Advisory, US Government Resource

Published

Jan 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1899IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could…4.3
• CVE-2018-18990LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-…
• CVE-2018-18991Reflected cross-site scripting (non-persistent) in SCADA Web…
• CVE-2018-18992LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking …
• CVE-2018-18993Two stack-based buffer overflow vulnerabilities have been di…7.8
• CVE-2018-18994LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out …
• CVE-2018-18996LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking …
• CVE-2018-18997Pluto Safety PLC Gateway Ethernet devices in ABB GATE-E1 and…
• CVE-2018-18998LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard code…
• CVE-2018-18999WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on …7.3
• CVE-2018-1900IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0…5.4
• CVE-2018-19000LCDS Laquis SCADA prior to version 4.1.0.4150 allows an auth…