CVE-2019-7225

The CVE-2019-7225 issue affects ABB HMI components by embedding hidden administrative accounts (IdalMaster with password idal123 and exor with password exor) used during provisioning to flash interfaces and map Tags via Panel Builder 600. Credentials are usable over HTTP(S) and FTP, with no optio...

CVE-2019-10995

The CVE-2019-10995 issue affects ABB CP651 HMI family (including CP651, CP651-WEB, CP661, CP661-WEB, CP665, CP665-WEB, CP676, CP676-WEB) with BSP UN30 v1.76 and earlier. It stems from hidden administrative accounts used during provisioning, enabling privileged access that can lead to arbitrary co...