CVE-2018-14805

—

CVSS 3.0

9.8 critical

EPSS

5%p91

Published

Aug 29, 2018 (Aug 29, 2018)

Modified

Jun 17, 2026

Description

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

Vendors: hitachienergy
Products: esoms
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news0 stories

No ingested article mentions this CVE yet.