CVE-2018-14805: Critical severity hitachienergy Esoms vulnerability
ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-14805?
CVE-2018-14805 is a vulnerability in ABB eSOMS version 6.0.2 that may allow unauthorized access to the system when LDAP is set to allow anonymous authentication.
How severe is CVE-2018-14805?
CVE-2018-14805 has a severity rating of 9.8, which is considered critical.
How can CVE-2018-14805 be exploited?
To exploit CVE-2018-14805, both the LDAP must be set to allow anonymous authentication and specific key values within the eSOMS web.config file must be present.
Which software versions are affected by CVE-2018-14805?
ABB eSOMS version 6.0.2 is affected by CVE-2018-14805.
How can I fix CVE-2018-14805?
To fix CVE-2018-14805, it is recommended to update ABB eSOMS to a version that addresses this vulnerability and properly configure LDAP authentication.