CVE-2019-19093

CWE-5213 documents3 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 59.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Hitachienergy EsomsABB Esoms
Timeline
PublishedApr 2
Latest updateMay 24

Description

eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

▶NVDhitachienergy/esoms4.0 — 6.0.3
▶CVEListV5abb/esoms4.0 to 6.0.3

🔴Vulnerability Details

2
GHSA
GHSA-r96g-cm23-vmm2: eSOMS versions 4↗2022-05-24
▶
CVEList
ABB eSOMS: Password complexity issue↗2020-04-02
▶
CVE-2019-19093 (MEDIUM CVSS 6.5) | eSOMS versions 4.0 to 6.0.3 do not | cvebase.io