ABB CP635 HMI
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-7225US | high8.8OT elevated | — | ||
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Pan… | ||||
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-19-178-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (7)
- MitigationCP620
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP620-WEB
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630-WEB
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-B
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-WEB
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan