CVE-2019-19093

ABB eSOMS: Password complexity issue

Medium6.5EPSS 0.85%

Published: 2 Apr 2020
Updated: 5 Aug 2024
Reserved: 18 Nov 2019
Assigned by: ABB

Description

eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords.

Scores

CVSS scores of CVE-2019-19093, by who scored it
Scored by	CVSS	Score	Vector
ABBCNA (assigner)	3.1	Medium6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
NVDNVD · Modified	3.1	Medium6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS (exploitation in 30 days): 0.85% · top 42% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

CWE-521 Weak Password Requirements (opens in a new tab)All about CWE-521 and its CVEs

Affected products

ABB · eSOMS
- affected 4.0 to 6.0.3

References (1)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-19093](https://trackcve.app/badge/CVE-2019-19093.svg)](https://trackcve.app/cve/CVE-2019-19093)

Record last updated 5 Aug 2024, 02:09 UTC.