8.8
CVE-2019-10995
- EPSS 0.13%
- Veröffentlicht 14.01.2020 17:15:12
- Zuletzt bearbeitet 21.11.2024 04:20:18
- Quelle ics-cert@hq.dhs.gov
- Teams Watchlist Login
- Unerledigt Login
ABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts that are used during the provisioning phase of the HMI interface.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Abb ≫ Cp651 Firmware Version <= bsp_un30_1.76
Abb ≫ Cp651-web Firmware Version <= bsp_un30_1.76
Abb ≫ Cp661-web Firmware Version <= bsp_un30_1.76
Abb ≫ Cp661 Firmware Version <= bsp_un30_1.76
Abb ≫ Cp665 Firmware Version <= bsp_un30_1.76
Abb ≫ Cp665-web Firmware Version <= bsp_un30_1.76
Abb ≫ Cp676-web Firmware Version <= bsp_un30_1.76
Abb ≫ Cp676 Firmware Version <= bsp_un30_1.76
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.335 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5.8 | 6.5 | 6.4 |
AV:A/AC:L/Au:N/C:P/I:P/A:P
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.