CVE-2018-5477

MEDIUM 5.8CVE-2018-5477 · Published 20/02/2018 · updated 17/06/2026

In short

CVE-2018-5477 is a MEDIUM (CVSS 5.8) vulnerability affecting netcadops (abb).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.0% of all vulnerabilities.
Fix: update to 7.2.10 or later.

Package	Affected versions	Patched versions
netcadops abb	`= 7.1= 8.0= 8.1≥ 3.0, ≤ 3.4≥ 7.2.0, < 7.2.10`	`7.2.10`

Description

An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information.

References

securityfocus.com/bid/103089 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-051-01 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free