Skip to content
OpenAdvisories
High 7PAA012159 1 CVE

System 800xA 5.1.x, 6.0.3.x, 6.1.1.x, 6.2.x - VideONet Camera passwords stored in clear text

Published Feb 10, 2025 · Updated Feb 10, 2025 · Revision 2

Vendor: ABB Product: System 800xA

Summary

ABB is aware of a vulnerability related to the VideONet product. The vulnerability is applicable in the System 800xA versions listed as affected in the advisory, where the VideONet product is used. There will be no update/resolution of this vulnerability in System 800xA. Instead, the strategy for ABB is to offer existing customers using VideONet a transfer to a new product, Camera Connect. This will be offered as soon as Camera Connect is available as a product.
An attacker who successfully exploited the vulnerability could, in the worst-case scenario, stop or manipulate the video feed.
There is no impact to other Operator station functions (graphics, trends, faceplates, etc.) and Control operations are not impacted at all.

Vulnerabilities 1

  • High 7.3
    CVE-2024-10334

    Camera passwords stored in clear text

    A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used.  An attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed. This issue aff…

    ABB System 800xA ICS / OT

Revision history

  1. #1

    Initial version.

  2. #2

    There were some minor corrections

References