CVE-2019-19096mediumCWE-257

CVE-2019-19096: medium-severity vulnerability in ABB eSOMS

ABB eSOMS: REDIS clear text credentials

Published · Updated

Follow this CVE+ Monitor eSOMS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.3%
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products
ABB · eSOMS
Related CVEs — ABB eSOMS

In the same product, most dangerous first.

CVE-2019-19001MEDIUMeSOMS X-FrameOptionEPSS 1.6%CVE-2019-19000MEDIUMeSOMS Cachecontrol (Pragma) HTTP HeaderEPSS 1.1%CVE-2019-19089MEDIUMeSOMS: X-Content-Type-Options Header MissingEPSS 1.1%CVE-2019-19094HIGHABB eSOMS: SQL injection vulnerabilityEPSS 0.9%CVE-2019-19093MEDIUMABB eSOMS: Password complexity issueEPSS 0.9%CVE-2019-19092LOWABB eSOMS: Viewstate without MAC SignatureEPSS 0.8%