Abb AC500 CPU Firmware vulnerabilities

2 CVEs affecting Abb AC500 CPU Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-3192, published 2023-03-31.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24685, published 2021-02-09. High severity, CVSS 8.6. EPSS: 1.6% chance of exploitation in the next 30 days. An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service (DoS) vulnerability. Vulnerability allows attacker to stop the PLC. After stopping (ERR…
• CVE-2022-3192, published 2023-03-31. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.