Summary
ABB is aware of a vulnerability in the product versions listed as affected in the advisory.
An attacker who successfully exploited this vulnerability could cause services to crash and restart by sending specifically crafted messages.
The vulnerability only affects 800xA services in PC based client/server nodes. Controllers are not affected by this vulnerability
Vulnerabilities 1
-
Medium 5.7
Communication DoS vulnerability
Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.
Revision history
-
#5
Updated Recommended immediate actions and References. Updated details about fix released in ABB 800xA Base 6.0.3-10
-
#4
Updated Affected Products and Recommended immediate actions
-
#3
Updated the planned release date for ABB 800xA Base 6.0.3-x
-
#2
Included CVSS v4.0 score
-
#1
Initial version
References
-
Refer below document for information about how to setup IPSec configuration.
- 2PAA111693-611 - System 800xA 6.1.1 Installation, Update and Upgrade - Post Installation
https://search.abb.com/library/Download.aspx?DocumentID=2PAA111693-611&LanguageCode=en&DocumentPartId=&Action=Launch
-
Refer below document for information about ABB 800xA Base 6.0.3-10.
- 7PAA020635 800xA - Base 6.0.3-10, Release Notes
https://search.abb.com/library/Download.aspx?DocumentID=7PAA020635&LanguageCode=en&DocumentPartId=&Action=Launch
-
ABB CYBERSECURITY ADVISORY - PDF version
https://search.abb.com/library/Download.aspx?DocumentID=7PAA013309&LanguageCode=en&DocumentPartId=&Action=Launch