An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.
References
| Link | Resource |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-17-353-01 | Third Party Advisory US Government Resource |
Configurations
History
16 May 2023, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hitachienergy:ellipse:*:*:*:*:*:*:*:* | |
| First Time |
Hitachienergy
Hitachienergy ellipse |
Information
Published : 2017-12-20 19:29
Updated : 2023-05-16 20:10
NVD link : CVE-2017-16731
Mitre link : CVE-2017-16731
JSON object : View
Products Affected
hitachienergy
- ellipse
CWE
CWE-522
Insufficiently Protected Credentials