PT-2020-6890 · Abb · Abb Esoms

Published 2020-02-17 · Updated 2023-05-16 · CVE-2019-19097

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABB eSOMS versions 4.0 to 6.0.3

Description The issue is related to the use of medium strength ciphers in ABB eSOMS, which could allow an attacker to eavesdrop and/or intercept connections. This could potentially lead to the disclosure of protected information.

Recommendations For ABB eSOMS versions 4.0 to 6.0.3, consider disabling connections that use medium strength ciphers to minimize the risk of exploitation. Restrict access to sensitive information until a more secure connection method is implemented.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

CWE-16

Related Identifiers

BDU:2023-04076

CVE-2019-19097

Affected Products

Abb Esoms

References · 6

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19097 · Security Note
• https://bdu.fstec.ru/vul/2023-04076 · Security Note
• https://t.me/cibsecurity/10960 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID9AKK107492A9964LanguageCodeenDocumentPartIdActionLaunch · Note