CVE-2026-79679

highPriorität · verfolgen · 0EPSS 0.003 · 28. PerzentilCH
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.34% (28th) EPSS
CVSS 8.7 · high
Is it mine?
2 products
Prüfe deine Angriffsfläche
Who says so?
1 sources
abb_psirt

EPSS · bewertet 2026-10-26

Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenB&R Industrial Automation GmbH mapp Audit installed with mapp Services <6.8.0abb_psirt

    The problem is corrected in the following product versions: mapp Services >= 6.8.0 B&R recommends that customers apply the update at earliest convenience when the vulnerable functionality mapp Audit is used. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • MitigationB&R Industrial Automation GmbH mapp Audit installed with mapp Services <6.8.0abb_psirt

    The exposure is limited to systems that actively use the mapp Audit functionality. Projects that only include mapp Services, but do not configure or use mapp Audit, are not affected. The risk can be further reduced by restricting network access to the affected OPC UA server, for example by limiting access to trusted engineering stations, runtime components, or dedicated automation network segments using the Automation Runtime host-based firewall. Refer to section “General security recommendations” for further advise on how to keep your system secure.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.7
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 2.7–8.7

v3.18.7highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Nsecondary · cybersecurity@ch.abb.comAusnutzbarkeit 2.2 · Auswirkung 5.8
v3.18.7highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:Osecondary · ABB PSIRT
v4.07highCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · cybersecurity@ch.abb.com
v4.02.7lowCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-1391USprimärCWE-1391US
05

betroffene Produkte (2)

Betroffene Produkte und Versionsbereiche.

06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • SA26P012mapp Services Use of Weak Authenticators in mapp Audit2026-09-03csaf · abb_psirtCH

    An update is available that resolves a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient entropy of authenticators used by mapp Audit.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

abb_psirtNVDCVE.orgMITRE
veröffentlicht 2026-09-03geändert 2026-09-03
09

Referenzen (1) nvd

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan