CVE-2019-7225

🗓️ 27 Jun 2019 16:38:39Reported by mitreType

The ABB HMI components have hidden administrative accounts with hardcoded credentials, allowing unauthorized access and control over the device

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of ABB’s automation control panels and the PB610 Panel Builder 600 software, which allows a intruder to read and write configuration files of HMI devices or trigger a system restart.	8 Jul 201900:00	–	bdu_fstec
CNVD	ABB HMI Hardcoded Credentials File Read Vulnerability	26 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-7225	27 Jun 201916:38	–	cvelist
EUVD	EUVD-2019-16769	7 Oct 202500:30	–	euvd
ICS	ABB PB610 Panel Builder 600	27 Jun 201900:00	–	ics
ICS	ABB CP635 HMI	27 Jun 201900:00	–	ics
NVD	CVE-2019-7225	27 Jun 201917:15	–	nvd
OSV	CVE-2019-7225	27 Jun 201917:15	–	osv
Prion	Design/Logic Flaw	27 Jun 201917:15	–	prion
Positive Technologies	PT-2019-2563 · Abb · Panel Builder 600 +15	5 Jun 201900:00	–	ptsecurity

NVD

Node

AND

abb cp620_firmwareRange≤1.76

abb cp620Match-

Node

AND

abb cp620-web_firmwareRange≤1.76

abb cp620-webMatch-

Node

AND

abb cp630_firmwareRange≤1.76

abb cp630Match-

Node

AND

abb cp630-web_firmwareRange≤1.76

abb cp630-webMatch-

Node

AND

abb cp635_firmwareRange≤1.76

abb cp635Match-

Node

AND

abb cp635-b_firmwareRange≤1.76

abb cp635-bMatch-

Node

AND

abb cp635-web_firmwareRange≤1.76

abb cp635-webMatch-

Node

AND

abb pb610_firmwareRange1.91–2.8.0.3674

abb pb610Match-

Node

AND

abb cp651-web_firmwareRange≤1.76

abb cp651-webMatch-

Node

AND

abb cp661_firmwareRange≤1.76

abb cp661Match-

Node

AND

abb cp661-web_firmwareRange≤1.76

abb cp661-webMatch-

Node

AND

abb cp665_firmwareRange≤1.76

abb cp665Match-

Node

AND

abb cp665-web_firmwareRange≤1.76

abb cp665-webMatch-

Node

AND

abb cp676_firmwareRange≤1.76

abb cp676Match-

Node

AND

abb cp676-web_firmwareRange≤1.76

abb cp676-webMatch-

Node

AND

abb cp651_firmwareRange≤1.76

abb cp651Match-

Source	Link
seclists	www.seclists.org/fulldisclosure/2019/Jun/38
securityfocus	www.securityfocus.com/bid/108922
packetstormsecurity	www.packetstormsecurity.com/files/153397/ABB-HMI-Hardcoded-Credentials.html
darkmatter	www.darkmatter.ae/xen1thlabs/abb-hmi-hardcoded-credentials-vulnerability-xl-19-009/

17 Jun 2026 02:40Current

8.7High risk

Vulners AI Score8.7

CVSS 25.8

CVSS 3.18.8

EPSS0.02895

CWE-798