Summary
ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+ Client Server network, they could exploit such vulnerabilities by executing arbitrary code and potentially compromising the entire system.
Vulnerabilities 4
-
High 8.8
Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…
-
High 8.8
PostgreSQL relation replacement during pg_dump executes arbitrary SQL
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or …
-
High 8.0
PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refres…
-
High 7.5
Postgresql: extension script @substitutions@ within quoting allow sql injection
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non…
Revision history
-
#2
Initial CISA Republication of ABB PSIRT 7PAA017341 advisory
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF Version
https://search.abb.com/library/Download.aspx?DocumentID=7PAA017341&LanguageCode=en&DocumentPartId=&Action=Launch
-
7PAA014844D2421 : S+ Engineering 2.4 SP2 Rollup 1 Release notes
https://search.abb.com/library/Download.aspx?DocumentID=7PAA014844D2421&LanguageCode=en&DocumentPartId=&Action=Launch
-
8VZZ001006T0001 : Symphony Plus Secure deployment guide for Windows 10 and Server 2016/2019 User manual
https://search.abb.com/library/Download.aspx?DocumentID=8VZZ001006T0001&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA121027 : Distributed Control Systems Trellix ePO with Endpoint Security and Application Control - Configuration Manual
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121027&LanguageCode=en&DocumentPartId=&Action=Launch
-
8VZZ000602 : Symphony Plus Security Updates Validation Status
https://search.abb.com/library/Download.aspx?DocumentID=8VZZ000602T0001&LanguageCode=en&DocumentPartId=&Action=Launch
-
7PAA018617 : Symphony Plus Daily Validation of Anti-Malware Definition Updates
https://search.abb.com/library/Download.aspx?DocumentID=7PAA018617&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA122516 : System 800xA, Symphony Plus and Freelance - System Hardening - End user manual
https://search.abb.com/library/Download.aspx?DocumentID=2PAA122516&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA120528 : System 800xA, Symphony Plus and Freelance - System Hardening - Group Policies Overview
https://search.abb.com/library/Download.aspx?DocumentID=2PAA120528&LanguageCode=en&DocumentPartId=&Action=Launch
-
8VZZ000368D0066 : ABB ICS Cyber Security Reference Architecture - Document
https://search.abb.com/library/Download.aspx?DocumentID=8VZZ000368D0066&LanguageCode=en&DocumentPartId=&Action=Launch
-
ICS Advisory ICSA-26-120-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-120-06
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b