ABB CP635 HMI
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-7225US | high8.8OT erhöht | — | ||
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Pan… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-19-178-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (7)
- MitigationCP620
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP620-WEB
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630-WEB
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-B
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-WEB
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan