CVE-2019-19092

ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstate might thus not be noticed.

Score

CVSS 3.1 3.5 Low

Status

Modified - cybersecurity@ch.abb.com

Published

2020-04-02

Last modified

2024-08-05

Weaknesses

CWE-16, CWE-306

Affected products

• Esoms (Abb)
• Esoms (Hitachienergy)

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch