AC500 V3 Multiple vulnerabilities
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could call shell functions (CVE-2023-6357), crash the PLC (CVE-2024-5000), crash the web server of the PLC (CVE-2024-8175), grant read access to files (CVE-2024-12429) or enable command execution (CVE-2024-12430). The vulnerabilities CVE-2023-6357, CVE-2024-12429 and CVE-2024-12430 require successful authentication.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-12430US | — | — | ||
An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully expl… | ||||
| CVE-2024-12429US | — | — | ||
An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully
authenticat… | ||||
| CVE-2024-8175US | — | — | ||
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS. | ||||
| CVE-2024-5000US | — | — | ||
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of bu… | ||||
| CVE-2023-6357US | — | — | ||
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the d… | ||||
references
External citations — patches, advisories, analysis.
- CVE-2023-6357: CODESYS Control V3 on Linux and QNX operating systems
- CVE-2024-5000: CODESYS Control V3 - OPC UA Stack
- CVE-2024-8175: CODESYS Control V3 web server
- Automation Builder 2.8.0
- ABB CYBERSECURITY ADVISORY - CSAF versionself
- Application note: AC500 User Management with V3
- ABB CYBERSECURITY ADVISORY - PDF versionself
remediations (5)
- FixedAC500 V3
The problem is corrected in AC500 V3 firmware version 3.8.0. ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.8.0.
- FixedAC500 V3
The problem is corrected in AC500 V3 firmware version 3.8.0. ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.8.0.
- FixedAC500 V3
The problem is corrected in AC500 V3 firmware version 3.8.0. ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.8.0.
- FixedAC500 V3
The problem is corrected in AC500 V3 firmware version 3.8.0. ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.8.0.
- FixedAC500 V3
The problem is corrected in AC500 V3 firmware version 3.8.0. ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.8.0.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan