CVE-2018-14805CWE-287

CVE-2018-14805: vulnerability in ICS-CERT ABB eSOMS

Published · Updated

Follow this CVE+ Monitor ABB eSOMS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.6%
ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.
Affected products
ICS-CERT · ABB eSOMS