Vulnerability in Abb Ac700f
CVE-2023-0425
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make the product inaccessible. Numeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects: Freelance controllers AC 700F: from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1; Freelance controllers AC 900F: Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.
EPSS: 0.005 (38.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H.
Affected products
- Abb Ac700f
- Abb Ac700f_firmware — versions 9.2.0
- Abb Ac900f
- Abb Freelance_2013
- Abb Freelance_2016
- Abb Freelance_2019
- Abb Freelance Controllers Ac 700f — versions 9.0;0, 0
- Abb Freelance Controllers Ac 900f — versions 0
Weakness classification (CWE)
References
- cybersecurity@ch.abb.com (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-0425?
- CVE-2023-0425 is a high-severity vulnerability in Abb Ac700f, classified under CWE-839. CVSS score: 8.6/10. Published 2023-08-07.
- How severe is CVE-2023-0425?
- High severity. CVSS v3 base score is 8.6 out of 10.