CVE-2019-7229
First published: Mon Jun 24 2019(Updated: )
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Abb Board Support Package Un31 | <2.31 | |
| Abb Cp620 Firmware | <2.8.0.424 | |
| Abb Cp620 | ||
| Abb Cp620-web Firmware | <2.8.0.424 | |
| Abb Cp620-web | ||
| Abb Cp630 Firmware | <2.0.8.424 | |
| Abb Cp630 | ||
| Abb Cp630-web Firmware | <2.8.0.424 | |
| Abb Cp630-web | ||
| Abb Cp635 Firmware | <2.8.0.424 | |
| ABB CP635 | ||
| Abb Cp635-b Firmware | <2.8.0.424 | |
| Abb Cp635-b | ||
| Abb Cp635-web Firmware | <2.8.0.424 | |
| Abb Cp635-web |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/153387/ABB-HMI-Missing-Signature-Verification.html
- http://seclists.org/fulldisclosure/2019/Jun/34
- https://search.abb.com/library/Download.aspx?DocumentID=3ADR010376&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=3ADR010402&LanguageCode=en&DocumentPartId=&Action=Launch
- https://www.darkmatter.ae/xen1thlabs/abb-hmi-absence-of-signature-verification-vulnerability-xl-19-005/
- collector/nvd-index
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/references
- agent/event
- vendor/abb
- canonical/abb board support package un31
- canonical/abb cp620 firmware
- canonical/abb cp620
- canonical/abb cp620-web firmware
- canonical/abb cp620-web
- canonical/abb cp630 firmware
- canonical/abb cp630
- canonical/abb cp630-web firmware
- canonical/abb cp630-web
- canonical/abb cp635 firmware
- canonical/abb cp635
- canonical/abb cp635-b firmware
- canonical/abb cp635-b
- canonical/abb cp635-web firmware
- canonical/abb cp635-web