CVE-2018-14805 Auth bypass in ABB eSOMS

What is CVE-2018-14805?

CVE-2018-14805 is a critical authentication bypass vulnerability in ICS-CERT ABB eSOMS, published on 29 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.

Weakness: CWE-287

Which versions are affected by CVE-2018-14805?

It affects 1 product.

Products include Hitachienergy Esoms.

How do I fix CVE-2018-14805?

No fix has been published for CVE-2018-14805 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-14805 being exploited?

There is no known exploitation of CVE-2018-14805 in the wild and no public exploit code.

Other vulnerabilities in ICS-CERT ABB eSOMS

• CVE-2019-19094 ABB eSOMS: SQL injection vulnerability High 7.6
• CVE-2021-35527 Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application High 7.5
• CVE-2021-26845 eSOMS Report Function Vulnerability High 7.5
• CVE-2019-19000 eSOMS Cachecontrol (Pragma) HTTP Header Medium 6.5
• CVE-2019-19001 eSOMS X-FrameOption Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qr8c-f5qw-7crq.