View CSAF

Summary

ABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully exploited this vulnerability could have - Unauthorized access - Insufficient Session Expiration leading to resource unavailability - Uncontrolled Resource Consumption leading to DOS attack ABB strongly advises customers to update the latest firmware of affected products.

The following versions of ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities are affected:

WebPro SNMP Card <=1.1.8.k, 1.1.8.p

CVSS Vendor Equipment Vulnerabilities

v3 8.8 ABB ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities Improper Check for Unusual or Exceptional Conditions, Incorrect Implementation of Authentication Algorithm, Insufficient Session Expiration

Background

Critical Infrastructure Sectors: Chemical, Communications, Critical…