You are here

ABB M2M ETHERNET (ICSA-18-352-07)

ABB M2M ETHERNET (ICSA-18-352-07)

Created: Thursday, December 20, 2018 - 13:03
Categories:
Cybersecurity

The NCCIC has published an advisory on an improper authentication vulnerability in ABB M2M ETHERNET. For FW, version 2.22 and prior are affected. For ETH-FW, versions prior to 1.01 and prior are affected. Successful exploitation of this vulnerability could allow an attacker to upload a malicious language file. ABB recommends installing the device in accordance with the latest instructions from the updated technical manual. NCCIC/ICS-CERT.