PT-2020-9163
CVE-2019-10995
·
Published
2020-01-14
·
Updated
2020-01-24
Description by
CVSS 3.1
8.8
HighMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ABB CP651 HMI products revision BSP UN30 version 1.76 and prior
Description
The issue concerns hidden administrative accounts used during the provisioning phase of the HMI interface.
Recommendations
For ABB CP651 HMI products revision BSP UN30 version 1.76 and prior, consider removing or disabling the hidden administrative accounts to prevent potential exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾