CVEvulnerability

CVE-2017-16731

8.8 HIGH Published 2017-12-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-12-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-522, CWE-523

Description

An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.

Affected configurations

• hitachienergy ellipse (>= 8.3.0 <= 8.9.0)

Related

Weakness · CWE (2)

  • CWE-522 Insufficiently Protected Credentials weakness
  • CWE-523 Unprotected Transport of Credentials weakness

References