CVE-2017-16731: High severity hitachienergy Ellipse vulnerability
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16731?
CVE-2017-16731 is classified as a critical vulnerability due to its potential for credential exposure during authentication processes.
How do I fix CVE-2017-16731?
To remediate CVE-2017-16731, apply the latest patches or updates for ABB Ellipse software that address this vulnerability.
What impact could CVE-2017-16731 have on my system?
CVE-2017-16731 could allow attackers to intercept and exploit unprotected credentials sent during the LDAP authentication process.
Which versions of ABB Ellipse are affected by CVE-2017-16731?
CVE-2017-16731 affects ABB Ellipse versions from 8.3 to 8.9 released prior to December 2017.
Is there a workaround for CVE-2017-16731?
Currently, no official workaround for CVE-2017-16731 is provided, so updating to a fixed version is the recommended action.