Skip to content
OpenAdvisories
Medium ICSA-24-177-01 1 CVE

ABB 800xA Base (Update A)

Published Jun 5, 2024 · Updated May 19, 2026 · Revision 7

Summary

ABB is aware of a vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploited this vulnerability could cause services to crash and restart by sending specifically crafted messages.

The vulnerability only affects 800xA services in PC based client/server nodes. Controllers are not affected by this vulnerability

Vulnerabilities 1

  • Medium 5.7

    Communication DoS vulnerability

    Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.

Revision history

  1. #7

    CISA Republication update based on ABB 7PAA013309 advisory

  2. #6

    Updated Recommended immediate actions and References. Updated details about fix released in ABB 800xA Base 6.0.3-10

  3. #5

    Updated Affected Products and Recommended immediate actions

  4. #4

    Updated the planned release date for ABB 800xA Base 6.0.3-x

  5. #3

    CISA Republication - Initial Publication

  6. #2

    Included CVSS v4.0 score

  7. #1

    Initial version

References