ABB Vulnerabilities and Affected Products
Vulnerabilities associated with eSOMS.
Products
Clear product- ASPECT-Enterprise58 vulnerabilities
- MATRIX Series58 vulnerabilities
- NEXUS Series58 vulnerabilities
- matrix_series22 vulnerabilities
- nexus_series22 vulnerabilities
- aspect_enterprise21 vulnerabilities
- eSOMS13 vulnerabilities
- ABB Ability™ Symphony® Plus Operations9 vulnerabilities
- ABB Ability™ Symphony® Plus Historian8 vulnerabilities
- AdvaBuild7 vulnerabilities
- FLXEON7 vulnerabilities
- Symphony Plus S+ Operations7 vulnerabilities
- Control Builder Safe6 vulnerabilities
- Symphony Plus S+ Engineering6 vulnerabilities
- ABB Ability System 800xA5 vulnerabilities
- Advant OCS AC 100 OPS Server5 vulnerabilities
- Advant OCS Control Builder A5 vulnerabilities
- Central Licensing System5 vulnerabilities
- Compact HMI5 vulnerabilities
- Composer CTK5 vulnerabilities
- Composer Harmony5 vulnerabilities
- Composer Melody5 vulnerabilities
- Harmony OPC Server Standalone5 vulnerabilities
- Knowledge Manager5 vulnerabilities
- Manufacturing Operations Management5 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-19002MEDIUM | ABB eSOMS X-XSS-Protection not enabledFor ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web server. For older web browser not supporting Content Security Policy, this might increase the risk of Cross Site Scripting. | CVSS6.3v3.1 | EPSS0.793% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19001MEDIUM | eSOMS X-FrameOptionFor ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentials. | CVSS6.5v3.1 | EPSS1.53% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19000MEDIUM | eSOMS Cachecontrol (Pragma) HTTP HeaderFor ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information. | CVSS6.5v3.1 | EPSS1.05% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19097MEDIUM | ABB eSOMS: SSL medium strength Cipher SuitesABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connection. | CVSS5.9v3.1 | EPSS0.676% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19096MEDIUM | ABB eSOMS: REDIS clear text credentialsThe Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality. | CVSS6.1v3.1 | EPSS0.289% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19095MEDIUM | ABB eSOMS: Stored XSS vulnerabilityLack of adequate input/output validation for ABB eSOMS versions 4.0 to 6.0.2 might allow an attacker to attack such as stored cross-site scripting by storing malicious content in the database. | CVSS5.4v3.1 | EPSS0.625% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19094HIGH | ABB eSOMS: SQL injection vulnerabilityLack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database. CWE-89Apr 2, 2020 | CVSS7.6v3.1 | EPSS0.935% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19093MEDIUM | ABB eSOMS: Password complexity issueeSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords. CWE-521Apr 2, 2020 | CVSS6.5v3.1 | EPSS0.832% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
ABB eSOMS: Viewstate without MAC SignatureABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstate might thus not be noticed. | CVSS3.5v3.1 | EPSS0.825% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2019-19091MEDIUM | ABB eSOMS: HTTP response information leakageFor ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. An attacker might use this detail information to specifically craft the attack. | CVSS4.3v3.1 | EPSS0.764% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
ABB eSOMS: Secure Flag not setFor ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping. | CVSS3.5v3.1 | EPSS0.517% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2019-19089MEDIUM | eSOMS: X-Content-Type-Options Header MissingFor ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially causing the response body to be interpreted and displayed as different content type other than declared. A possible attack scenario would be unauthorized code execution via text interpreted as JavaScript. | CVSS6.1v3.1 | EPSS1.05% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-19003MEDIUM | ABB eSOMS: HTTPOnly flag not setFor ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie contents, which in turn might enable Cross Site Scripting. | CVSS5.3v3.1 | EPSS0.766% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |