CVE-2019-7225
mediumPriorität · verfolgen · 36OT-Risiko · erhöhtEPSS 0.029 · 87. PerzentilEURUUSEPSS · bewertet 2026-10-27
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags (MODBUS coils) mapping to the HMI. These credentials are the idal123 password for the IdalMaster account, and the exor password for the exor account. These credentials are used over both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device. This affects ABB CP635 HMI, CP600 HMIClient, Panel Builder 600, IDAL FTP server, IDAL HTTP server, and multiple other HMI components.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationPB610 Panel Builder 600 order codecisa_csaf_ot
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationCP620cisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP620-WEBcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630cisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630-WEBcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635cisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-Bcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-WEBcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.8–8.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (55)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-19-178-01ABB PB610 Panel Builder 6002019-06-27icsa · cisa_csaf_otUS
An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
- ICSA-19-178-03ABB CP635 HMI2019-06-27icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (21)
Externe Belege — Patches, Meldungen, Analysen.
- http://packetstormsecurity.com/files/153397/ABB-HMI-Hardcoded-Credentials.htmlcnnvd
- http://seclists.org/fulldisclosure/2019/Jun/38cnnvd
- http://www.abb.com/cnnvd
- https://library.e.abb.com/public/6b454c20b3a2445ea148a07c46a2f85c/ABB-Advisory_3ADR010376.pdfcnnvd
- https://library.e.abb.com/public/b0021d2ab9ba4e3ab14d7c2796f5908e/ABB-Advisory_3ADR010377_2.pdfPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-7225cnnvd
- https://packetstormsecurity.com/files/153397/ABB-HMI-Hardcoded-Credentials.htmlcnnvd
- https://seclists.org/fulldisclosure/2019/Jun/38cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan