Summary
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability.
Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R Automation Studio establishes a connection with a server via the ANSL over TLS or OPC-UA protocol.
Vulnerabilities 1
-
High 7.4
Improper Server Certificate Validation in Automation Studio
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exc…
Revision history
-
#2
Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.
-
#1
Initial Version
References
-
ABB CYBERSECURITY ADVISORY - PDF version
https://www.br-automation.com/fileadmin/SA25P004-4f45197f.pdf