CVE-2018-5477

{"id": "CVE-2018-5477", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2018-02-20T19:29:00.273", "references": [{"url": "http://www.securityfocus.com/bid/103089", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-051-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information."}, {"lang": "es", "value": "Se ha descubierto un problema de exposici\u00f3n de informaci\u00f3n en ABB netCADOPS Web Application en versiones 3.4 y anteriores, versiones 7.1 y anteriores, versiones 7.2x y anteriores, versiones 8.0 y anteriores y versiones 8.1 y anteriores. Existe una vulnerabilidad en la secci\u00f3n de introducci\u00f3n de contrase\u00f1as de netCADOPS Web Application que podr\u00eda exponer datos cr\u00edticos de la base de datos."}], "lastModified": "2019-10-09T23:41:26.953", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:abb:netcadops:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D83104DB-E8F8-430C-8309-8B05FCB5F99C", "versionEndIncluding": "3.4", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:abb:netcadops:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F53EBD6-1C85-4B66-9F94-D5A8C8851C88", "versionEndExcluding": "7.2.10", "versionStartIncluding": "7.2.0"}, {"criteria": "cpe:2.3:a:abb:netcadops:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F85E44AA-BE94-4947-B364-75B9A7139F8D"}, {"criteria": "cpe:2.3:a:abb:netcadops:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6EB5A946-5275-41B0-973B-6CC934BA9708"}, {"criteria": "cpe:2.3:a:abb:netcadops:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DD6FE3D-E548-4AB3-B987-94523C0D3F70"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}