CVE-2018-14805 Vulnerability Details

  /     /     /  

CVE-2018-14805 Metadata Quick Info

CVE Published: 29/08/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: icscert | Vendor: ICS-CERT | Product: ABB eSOMS
Status : PUBLISHED

---

CVE-2018-14805 Description

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-287
CWE Name: IMPROPER AUTHENTICATION CWE-287
Source: ICS-CERT

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).