Summary
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.
Vulnerabilities 1
-
Medium 6.6
Freelance Security Lock – Access to Windows OS
Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024.
Revision history
-
#2
Initial CISA Republication of ABB PSIRT 7PAA020361 advisory
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF Version
https://search.abb.com/library/Download.aspx?DocumentID=7PAA020361&LanguageCode=en&DocumentPartId=&Action=Launch
-
3BDD012560-121 : Getting started
https://search.abb.com/library/Download.aspx?DocumentID=3BDD012560-121&LanguageCode=en&DocumentPartId=&Action=Launch
-
7PAA000403-121 : Release Notes for Freelance 2024 system release
https://search.abb.com/library/Download.aspx?DocumentID=7PAA000403-121&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA112641-121 - Freelance Hardening Manual
https://search.abb.com/library/Download.aspx?DocumentID=2PAA112641-121&LanguageCode=en&DocumentPartId=&Action=Launch
-
3BSE032547 - Security for Industrial Automation and Control Systems
https://search.abb.com/library/Download.aspx?DocumentID=3BSE032547&LanguageCode=en&DocumentPartId=&Action=Launch
-
2PAA122516 - ABB Ability™ System 800xA, Symphony® Plus and Freelance System Hardening
https://search.abb.com/library/Download.aspx?DocumentID=2PAA122516&LanguageCode=en&DocumentPartId=&Action=Launch
-
ICS Advisory ICSA-26-174-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-174-05
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b