PT-2020-9163 · Abb · Abb Cp651 Hmi

Published 2020-01-14 · Updated 2020-01-24 · CVE-2019-10995

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB CP651 HMI products revision BSP UN30 version 1.76 and prior

Description The issue concerns hidden administrative accounts used during the provisioning phase of the HMI interface.

Recommendations For ABB CP651 HMI products revision BSP UN30 version 1.76 and prior, consider removing or disabling the hidden administrative accounts to prevent potential exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-10995

Affected Products

Abb Cp651 Hmi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-10995 · Security Note
• https://osv.dev/vulnerability/CVE-2019-10995 · Vendor Advisory
• https://us-cert.gov/ics/advisories/icsa-19-178-02 · Note
• http://securityfocus.com/bid/108928 · Note