CVE-2018-5477 Information

Description

An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior netCADOPS Web Application Version 7.1 and prior netCADOPS Web Application Version 7.2x and prior netCADOPS Web Application Version 8.0 and prior and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Reference

http://www.securityfocus.com/bid/103089 https://ics-cert.us-cert.gov/advisories/ICSA-18-051-01

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

LOW

Availability Impact

NONE

Base Score

NONE

Base Severity

5.8