5.9
Medium
CVE-2019-19097 ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers
Description
ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| eSOMS | Versions not published |
Other CVEs of eSOMS
The 13 CVEs of eSOMS →
CVE-2019-19002
For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web…
6.3
Medium
CVE-2019-19001
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response
6.5
Medium
CVE-2019-19000
For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the…
6.5
Medium
CVE-2019-19096
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text
6.1
Medium