Summary
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited.
This issue may allow unauthorized manipulation of the edge authentication database if successfully exploited.
ABB has developed and released a corrective update that resolves this vulnerability and enhances the security posture of the affected system.
Vulnerabilities 1
-
High 7.8
ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0.
Revision history
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF version
https://search.abb.com/library/Download.aspx?DocumentID=7PAA026271&LanguageCode=en&DocumentPartId=&Action=Launch
-
Technical Description ABB Ability Edgenius Missing Authentication in Edgenius AuthDB (7PAA025722)
https://search.abb.com/library/Download.aspx?DocumentID=7PAA025722&LanguageCode=en&DocumentPartId=&Action=Launch