VulnerabilityModified

CVE-2019-19091

An attacker might use this detail information to specifically craft the attack.

MEDIUM 4.3EPSS 0.76%

Does this matter?

Lower severity and a low EPSS score (0.76%). Track it; it rarely justifies an emergency change on its own.

Description

For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. An attacker might use this detail information to specifically craft the attack.

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.76% probability · 53th percentile
CISA KEV: Not listed
Weakness: CWE-16, CWE-202, CWE-200
Affected: hitachienergy/esoms
Source: cybersecurity@ch.abb.com

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.