CVE-2018-14805 | BDVDB-2026-106296 Detail

ICS-CERTABB eSOMS

Description#

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-287 Improper Authentication

References#

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107046A5821&LanguageCode=en&DocumentPartId=&Action=Launch
https://ics-cert.us-cert.gov/advisories/ICSA-18-240-04
http://www.securityfocus.com/bid/105169

Exploit#

No public exploit known

History#

Version 12018-08-29Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.