High severity · published Jun 24, 2019
CVE-2019-7229
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote…
8.3
CVSS
1.1%
EPSS
No
On KEV
Description
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Board Support Package Un31 · Abb
before 2.31 · source: NVD
CF
Cp620 Firmware · Abb
before 2.8.0.424 · source: NVD
CF
Cp620-web Firmware · Abb
before 2.8.0.424 · source: NVD
CF
Cp630 Firmware · Abb
before 2.0.8.424 · source: NVD
CF
Cp630-web Firmware · Abb
before 2.8.0.424 · source: NVD
CF
Cp635 Firmware · Abb
before 2.8.0.424 · source: NVD
CF
Cp635-b Firmware · Abb
before 2.8.0.424 · source: NVD
CF
Cp635-web Firmware · Abb
before 2.8.0.424 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-7229
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-7229
Exploit
http://packetstormsecurity.com/files/153387/ABB-HMI-Missing-Signature-Verification.html
Exploit
http://seclists.org/fulldisclosure/2019/Jun/34
Mitigation
https://search.abb.com/library/Download.aspx?DocumentID=3ADR010376&LanguageCode=en&DocumentPartId=&Action=Launch
Mitigation
https://search.abb.com/library/Download.aspx?DocumentID=3ADR010402&LanguageCode=en&DocumentPartId=&Action=Launch
Exploit
https://www.darkmatter.ae/xen1thlabs/abb-hmi-absence-of-signature-verification-vulnerability-xl-19-005/