CVE-2018-5477: Infoleak
An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5477?
CVE-2018-5477 has a medium severity rating due to its information exposure issues that can lead to unauthorized access to sensitive data.
How do I fix CVE-2018-5477?
To mitigate CVE-2018-5477, upgrade to a version of ABB netCADOPS that is 8.2 or later, as earlier versions are vulnerable.
What versions of ABB netCADOPS are affected by CVE-2018-5477?
CVE-2018-5477 affects ABB netCADOPS versions 3.4 and prior, 7.1 and prior, 7.2x and prior, 8.0 and prior, and 8.1 and prior.
What type of vulnerability is CVE-2018-5477?
CVE-2018-5477 is classified as an Information Exposure vulnerability, allowing unauthorized data disclosure.
Is CVE-2018-5477 being actively exploited?
There have been reports of CVE-2018-5477 being exploited in the wild, emphasizing the need for immediate remediation.