CVE-2020-24686: AC500 V2 webserver denial of service vulnerability
First published: Fri Feb 26 2021(Updated: )
The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and refuse connections to Automation Builder. The execution of the PLC application is not affected by this vulnerability. This issue affects ABB AC500 V2 products with onboard Ethernet.
Credit: cybersecurity@ch.abb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Abb Pm554 Firmware | ||
| Abb Pm554 | ||
| Abb Pm556 Firmware | ||
| Abb Pm556 | ||
| Abb Pm564 Firmware | ||
| Abb Pm564 | ||
| Abb Pm566 Firmware | ||
| Abb Pm566 | ||
| Abb Pm572 Firmware | ||
| Abb Pm572 | ||
| Abb Pm573 Firmware | ||
| Abb Pm573 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-24686?
CVE-2020-24686 is a vulnerability that allows attackers to cause the web visualization component of the PLC to stop responding.
How severe is CVE-2020-24686?
CVE-2020-24686 has a severity rating of 7.5 (high).
Which software is affected by CVE-2020-24686?
The affected software includes ABB PM554 firmware, ABB PM556 firmware, ABB PM564 firmware, ABB PM566 firmware, ABB PM572 firmware, and ABB PM573 firmware.
How can I fix CVE-2020-24686?
To fix CVE-2020-24686, it is recommended to apply the security patch provided by the vendor ABB.
Where can I find more information about CVE-2020-24686?
You can find more information about CVE-2020-24686 [here](https://search.abb.com/library/Download.aspx?DocumentID=3ADR010645&LanguageCode=en&DocumentPartId=&Action=Launch).
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/abb
- canonical/abb pm554 firmware
- canonical/abb pm554
- canonical/abb pm556 firmware
- canonical/abb pm556
- canonical/abb pm564 firmware
- canonical/abb pm564
- canonical/abb pm566 firmware
- canonical/abb pm566
- canonical/abb pm572 firmware
- canonical/abb pm572
- canonical/abb pm573 firmware
- canonical/abb pm573