CVE-2018-14805

2018-08-2800:00:00

CWE-287

icscert

www.cve.org

9.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

JSON

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

CNA Affected

[
  {
    "product": "ABB eSOMS",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "Version 6.0.2"
      }
    ]
  }
]