Skip to content
OpenAdvisories

Product · ABB

eSOMS

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2019-19092

    ABB eSOMS: Viewstate without MAC Signature

    ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstate might thus not be noticed.

    ABB eSOMS ICS / OT
  • Low 3.5
    CVE-2019-19090

    ABB eSOMS: Secure Flag not set

    For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.

    ABB eSOMS ICS / OT