8.8

CVE-2019-10995

ABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts that are used during the provisioning phase of the HMI interface.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Abb ≫ Cp651 Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp651 Version -
Abb ≫ Cp651-web Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp651-web Version -
Abb ≫ Cp661-web Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp661-web Version -
Abb ≫ Cp661 Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp661 Version -
Abb ≫ Cp665 Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp665 Version -
Abb ≫ Cp665-web Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp665-web Version -
Abb ≫ Cp676-web Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp676-web Version -
Abb ≫ Cp676 Firmware Version <= bsp_un30_1.76
   Abb ≫ Cp676 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.73% 0.492
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

http://www.securityfocus.com/bid/108928
Third Party Advisory
VDB Entry
https://www.us-cert.gov/ics/advisories/icsa-19-178-02
Third Party Advisory
US Government Resource