CVE-2019-7229
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
- CVSS 3.1
- 8.3 HIGHCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 1.10% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-494
- Affected
- abb/board support package un31 · abb/cp620 firmware · abb/cp620-web firmware · abb/cp630 firmware · abb/cp630-web firmware · abb/cp635 firmware · abb/cp635-b firmware · abb/cp635-web firmware
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/153387/ABB-HMI-Missing-Signature-Verification.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=3ADR010376&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Patch, Vendor Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=3ADR010402&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Patch, Vendor Advisory
- https://www.darkmatter.ae/xen1thlabs/abb-hmi-absence-of-signature-verification-vulnerability-xl-19-005/Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/153387/ABB-HMI-Missing-Signature-Verification.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/34Exploit, Mailing List, Third Party Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=3ADR010376&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Patch, Vendor Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=3ADR010402&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Patch, Vendor Advisory
- https://www.darkmatter.ae/xen1thlabs/abb-hmi-absence-of-signature-verification-vulnerability-xl-19-005/Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.