ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
CODESYS group published several vulnerabilities regarding the CODESYS Runtime System, which is included in the firmware of ABB LV DC drives and power controllers. It is used to implement a selection of features and to provide IEC 611131-3 programming capabilities. These vulnerabilities include memory corruption issues that could lead to out-of-bound memory access. Subsequently, a successful exploit could allow attackers to trigger a denial-of-service condition or execute arbitrary code over the fieldbus interfaces. Exploiting these vulnerabilities requires an IEC 61131-3 license being present on the memory unit of the drive or power controller.
beschreibt (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-4046US | — | — | ||
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access… | ||||
| CVE-2023-37559US | — | — | ||
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the… | ||||
| CVE-2023-37558US | — | — | ||
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the… | ||||
| CVE-2023-37557US | — | — | ||
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to over… | ||||
| CVE-2023-37556US | — | — | ||
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37555US | — | — | ||
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37554US | — | — | ||
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37553US | — | — | ||
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37552US | medium6.5 | — | ||
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37550US | — | — | ||
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37549US | — | — | ||
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37548US | — | — | ||
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37547US | — | — | ||
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37546US | — | — | ||
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
| CVE-2023-37545US | — | — | ||
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- For more details about the individual vulnerabilities see the following advisories by CODESYS Group: CDS-82457
- CDS-85189
- ICS Advisory ICSA-25-093-04 JSONself
- ABB CYBERSECURITY ADVISORY - PDF version
- Recommended Practicesexternal
- ICS Advisory ICSA-25-093-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (60)
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundABB Drive Application Builder license (IEC 61131-3)
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDCC
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundDEMag
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
- WorkaroundPower Optimizer
If the drive or power controller is in an exploitable configuration, ABB recommends immediately applying the mitigations described in the Workarounds section.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan