Design/Logic Flaw

2020-01-1417:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

ABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts that are used during the provisioning phase of the HMI interface.

CPENameOperatorVersion
cp651-web_firmwareeq<= bspun301.76
cp651_firmwareeq<= bspun301.76
cp661-web_firmwareeq<= bspun301.76
cp661_firmwareeq<= bspun301.76
cp665-web_firmwareeq<= bspun301.76
cp665_firmwareeq<= bspun301.76
cp676-web_firmwareeq<= bspun301.76
cp676_firmwareeq<= bspun301.76

Name	Operator	Version
cp651-web_firmware	eq	<= bspun301.76
cp651_firmware	eq	<= bspun301.76
cp661-web_firmware	eq	<= bspun301.76
cp661_firmware	eq	<= bspun301.76
cp665-web_firmware	eq	<= bspun301.76
cp665_firmware	eq	<= bspun301.76
cp676-web_firmware	eq	<= bspun301.76
cp676_firmware	eq	<= bspun301.76