What is CVE-2019-7229?

CVE-2019-7229 is a high-severity vulnerability in Abb Board Support Package Un31, classified under Download of Code Without Integrity Check. CVSS score: 8.3/10. Published 2019-06-24.

How severe is CVE-2019-7229?

High severity. CVSS v3 base score is 8.3 out of 10.

Vulnerability in Abb Board Support Package Un31

CVE-2019-7229

The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.

EPSS: 0.011 (62.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Patch, Mitigation, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Mitigation, Vendor Advisory)
cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-7229?: CVE-2019-7229 is a high-severity vulnerability in Abb Board Support Package Un31, classified under Download of Code Without Integrity Check. CVSS score: 8.3/10. Published 2019-06-24.
How severe is CVE-2019-7229?: High severity. CVSS v3 base score is 8.3 out of 10.