PT-2018-8521 · Abb · Abb Srea-01+1

Published 2018-05-24 · Updated 2019-10-09 · CVE-2017-9664

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB SREA-01 versions up to 3.31.5 ABB SREA-50 version up to 3.32.8

Description The issue allows an attacker to access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without authorization over the network. This is achieved by using a HTTP request that refers to files using ../../ relative paths. Once the internal password file is retrieved, the password hash can be identified using a brute force attack. Additionally, there is a possibility of running commands after authorization.

Recommendations For ABB SREA-01 versions up to 3.31.5, restrict access to the HTTP request endpoint to minimize the risk of exploitation. For ABB SREA-50 version up to 3.32.8, consider disabling the ability to access internal files using relative paths until a patch is available. As a temporary workaround, limit network access to the affected tools to prevent unauthorized file access.

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2017-9664

Affected Products

Abb Srea-01

Abb Srea-50

References · 4

• https://osv.dev/vulnerability/CVE-2017-9664 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9664 · Security Note
• http://securityfocus.com/bid/100260 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05 · Note