Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application.
Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability:
User Interface
System Monitoring1
Asset Inventory
This issue affects My Control System (on-premise): from 5.0;0 through 5.13.
References
| Link | Resource |
|---|---|
| https://search.abb.com/library/Download.aspx?DocumentID=7PAA007893&LanguageCode=en&DocumentPartId=&Action=Launch | Vendor Advisory |
Configurations
History
07 Nov 2023, 04:00
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13. |
14 Apr 2023, 15:43
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-922 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Abb my Control System
Abb |
|
| CPE | cpe:2.3:a:abb:my_control_system:*:*:*:*:on-premise:*:*:* | |
| References | (MISC) https://search.abb.com/library/Download.aspx?DocumentID=7PAA007893&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory |
06 Apr 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-06 17:15
Updated : 2023-11-07 04:00
NVD link : CVE-2023-0580
Mitre link : CVE-2023-0580
JSON object : View
Products Affected
abb
- my_control_system
CWE
CWE-922
Insecure Storage of Sensitive Information