Summary
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability.
Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R Automation Studio establishes a connection with a server via the ANSL over TLS or OPC-UA protocol.
Vulnerabilities 1
-
High 7.4
Improper Server Certificate Validation in Automation Studio
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exc…
Revision history
-
#2
Initial CISA Republication of ABB PSIRT SA25P004 advisory
-
#1
Initial Version
References
-
ABB CYBERSECURITY ADVISORY - PDF version
https://www.br-automation.com/fileadmin/SA25P004-4f45197f.pdf
-
ICS Advisory ICSA-26-125-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-125-04
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b