The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions

The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process

The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request

The ABB IDAL FTP server mishandles format strings in a username during the authentication process

In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download…

The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker