Back to feed
EUVD-2017-7915 · Published Dec 20, 2017
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.
Technologies
Hitachienergy Ellipse
Weaknesses
CWE-522CWE-523
CVSS scores
- v3.08.8
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.02.9
AV:A/AC:M/Au:N/C:P/I:N/A:N
References
Potentially impacted assets
See if this affects your attack surface
