CVE-2018-14805

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-08-29

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Esoms (Hitachienergy)
• Abb Esoms (Ics-cert)

References

• http://www.securityfocus.com/bid/105169
• https://ics-cert.us-cert.gov/advisories/ICSA-18-240-04
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107046A5821&LanguageCode=en&DocumentPartId=&Action=Launch