Critical severity9.8NVD Advisory· Published Aug 29, 2018· Updated Jun 17, 2026

CVE-2018-14805

Description

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hitachienergy/Esoms
cpe:2.3:a:hitachienergy:esoms:6.0.2:*:*:*:*:*:*:*
ICS-CERT/ABB eSOMSv5
Range: Version 6.0.2
Abb/eSOMSllm-create
Range: =6.0.2

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105169nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-18-240-04nvdThird Party AdvisoryUS Government Resource
search.abb.com/library/Download.aspxnvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000