CVE-2019-7229: High severity abb board support package un31 vulnerability
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7229?
CVE-2019-7229 has been assigned a severity score, indicating a potential security risk due to inadequate encryption in firmware updates.
How do I fix CVE-2019-7229?
To fix CVE-2019-7229, ensure firmware updates are signed and implement encryption during the update process.
Which devices are affected by CVE-2019-7229?
CVE-2019-7229 affects various ABB CP635 firmware versions, including CP620, CP630, and their web counterparts.
What are the risks associated with CVE-2019-7229?
The risks of CVE-2019-7229 include potential unauthorized firmware modifications and compromised system integrity.
Is there a workaround for CVE-2019-7229?
A workaround for CVE-2019-7229 is to limit firmware update access and monitor for unauthorized changes.