High severity · published Sep 18, 2026
CVE-2023-5778
Missing Length Check
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.
This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Freelance Controller AC700 · ABB
through 2013; 2013 SP1; 2016; 2016 SP1; 2019; 2019 SP1 · source: vendor
FC
Freelance Controller AC800 · ABB
through 2013; 2013 SP1; 2016; 2016 SP1; 2019; 2019 SP1 · source: vendor
FC
Freelance Controller AC900 · ABB
through 2013; 2013 SP1; 2016; 2016 SP1; 2019; 2019 SP1 · source: vendor
FC
Freelance Controller DCP · ABB
through 2013; 2013 SP1; 2016; 2016 SP1; 2019; 2019 SP1 · source: vendor