Summary
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An update is available that resolves the reported vulnerability in the product versions under maintenance.
An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.
Vulnerabilities 1
-
High 7.5
Missing Length Check
Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2…
Revision history
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF Version
https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch
-
3BDD012560-111 - Getting started
https://search.abb.com/library/Download.aspx?DocumentID=3BDD012560-111&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA124716-112 - Release Notes for Freelance 2019 SP1 FP1 system release
https://search.abb.com/library/Download.aspx?DocumentID=2PAA124716-112&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA112641-111 - Freelance Hardening Manual
https://search.abb.com/library/Download.aspx?DocumentID=2PAA112641-111&LanguageCode=en&DocumentPartId=&Action=Launch
-
3BSE032547 - Security for Industrial Automation and Control Systems
https://search.abb.com/library/Download.aspx?DocumentID=3BSE032547&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA122516 - ABB Ability™ System 800xA, Symphony® Plus and Freelance System Hardening
https://search.abb.com/library/Download.aspx?DocumentID=2PAA122516&LanguageCode=en&DocumentPartId=&Action=Launch