CVE-2019-10995: High severity abb cp651 vulnerability
Published Jan 14, 2020
·Updated
ABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts that are used during the provisioning phase of the HMI interface.
Affected Software
16 affected components
ABB Cp651 Firmware<=bsp_un30_1.76
ABB CP651
ABB Cp651-web Firmware<=bsp_un30_1.76
ABB Cp651-web
ABB Cp661-web Firmware<=bsp_un30_1.76
ABB Cp661-web
ABB Cp661 Firmware<=bsp_un30_1.76
ABB Cp661
ABB Cp665 Firmware<=bsp_un30_1.76
ABB Cp665
ABB Cp665-web Firmware<=bsp_un30_1.76
ABB Cp665-web
ABB Cp676-web Firmware<=bsp_un30_1.76
ABB Cp676-web
ABB Cp676 Firmware<=bsp_un30_1.76
ABB Cp676
Event History
Jan 14, 2020
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-10995?
CVE-2019-10995 has a medium severity rating, indicating a moderate risk of exploitation.
2
How do I fix CVE-2019-10995?
To mitigate CVE-2019-10995, update the ABB CP651 HMI products to a version later than BSP UN30 v1.76.
3
What types of devices are affected by CVE-2019-10995?
CVE-2019-10995 affects ABB CP651 HMI products versions BSP UN30 v1.76 and earlier.
4
What is the main issue with CVE-2019-10995?
The primary concern of CVE-2019-10995 is that hidden administrative accounts can be exploited during the provisioning phase.
5
Are there any workarounds for CVE-2019-10995?
There are no official workarounds for CVE-2019-10995; the only solution is to apply the appropriate firmware update.