CVE-2020-24685
High
Description
An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service (DoS) vulnerability. Vulnerability allows attacker to stop the PLC. After stopping (ERR LED flashing red), physical access to the PLC is required in order to restart the application. This issue affects: ABB AC500 V2 products with onboard Ethernet version 2.8.4 and prior versions.
SeverityHigh
CVSS8.6
Exploit probability—
ProductAbb Ac500 Cpu Firmware
PublishedFeb 9, 2021
First seenFeb 9, 2021
Weakness typeCWE-789CWE-789
How to fix
Update
- abb ac500_cpu_firmware2.8.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb ac500_cpu_firmware | v < 2.8.5 | 2.8.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.