Skip to content
OpenAdvisories
High ICSA-20-072-02 1 CVE

ABB Asset Suite

Published Mar 12, 2020 · Updated Mar 12, 2020

Vendor: ABB Product: Asset Suite

Summary

Successful exploitation of this vulnerability could allow an attacker access to unauthorized information in the application by direct resource access.

Vulnerabilities 1

  • High 7.1
    CVE-2019-18998

    Asset Suite Direct Object Reference Access

    Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the res…

    ABB Asset Suite ICS / OT

Revision history

  1. #1

    ICSA-20-072-02 ABB Asset Suite

References