CVE-2017-16731

2017-12-2019:00:00

CWE-523

icscert

www.cve.org

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

29.9%

JSON

An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.

CNA Affected

[
  {
    "product": "ABB Ellipse",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ABB Ellipse"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-17-353-01