Abb CP620 Firmware vulnerabilities

2 CVEs affecting Abb CP620 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-7225, published 2019-06-27.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-7225, published 2019-06-27. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to…
• CVE-2019-7229, published 2019-06-24. High severity, CVSS 8.3. EPSS: 1.1% chance of exploitation in the next 30 days. The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via…