CVE-2019-7225
mediumpriority · track · 36OT risk · elevatedEPSS 0.029 · 87 %ileEURUUSEPSS · scored 2026-10-27
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags (MODBUS coils) mapping to the HMI. These credentials are the idal123 password for the IdalMaster account, and the exor password for the exor account. These credentials are used over both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device. This affects ABB CP635 HMI, CP600 HMIClient, Panel Builder 600, IDAL FTP server, IDAL HTTP server, and multiple other HMI components.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationPB610 Panel Builder 600 order codecisa_csaf_ot
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationCP620cisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP620-WEBcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630cisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP630-WEBcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635cisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-Bcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
- MitigationCP635-WEBcisa_csaf_ot
ABB recommends users apply the BSP update on affected CP600 control panels at their earliest convenience.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.8–8.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (55)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- ICSA-19-178-01ABB PB610 Panel Builder 6002019-06-27icsa · cisa_csaf_otUS
An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
- ICSA-19-178-03ABB CP635 HMI2019-06-27icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (21)
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/153397/ABB-HMI-Hardcoded-Credentials.htmlcnnvd
- http://seclists.org/fulldisclosure/2019/Jun/38cnnvd
- http://www.abb.com/cnnvd
- https://library.e.abb.com/public/6b454c20b3a2445ea148a07c46a2f85c/ABB-Advisory_3ADR010376.pdfcnnvd
- https://library.e.abb.com/public/b0021d2ab9ba4e3ab14d7c2796f5908e/ABB-Advisory_3ADR010377_2.pdfPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-7225cnnvd
- https://packetstormsecurity.com/files/153397/ABB-HMI-Hardcoded-Credentials.htmlcnnvd
- https://seclists.org/fulldisclosure/2019/Jun/38cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan