Design/Logic Flaw

2018-08-2916:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

JSON

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

CPENameOperatorVersion
esomseq6.0.2

CPE	Name	Operator	Version
	esoms	eq	6.0.2

References

www.securityfocus.com/bid/105169

ics-cert.us-cert.gov/advisories/ICSA-18-240-04

search.abb.com/library/Download.aspx?DocumentID=9AKK107046A5821&LanguageCode=en&DocumentPartId=&Action=Launch