CVE-2019-18998: Asset Suite Direct Object Reference Access
Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2019-18998?
CVE-2019-18998 is a vulnerability that allows full access to directly referenced objects in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2, and 9.6.0.
What is the severity of CVE-2019-18998?
The severity of CVE-2019-18998 is rated as high, with a CVSS score of 7.1.
Which software versions are affected by CVE-2019-18998?
CVE-2019-18998 affects ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2, and 9.6.0.
How can an attacker exploit CVE-2019-18998?
An attacker with knowledge of a resource's URL can directly access the resource, enabling full access to directly referenced objects.
Are there any references for CVE-2019-18998?
Yes, you can find references for CVE-2019-18998 at the following links: [Reference 1](https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9962&LanguageCode=en&DocumentPartId=&Action=Launch), [Reference 2](https://www.us-cert.gov/ics/advisories/icsa-20-072-02).