Use of hard-coded credentials in ABB products - CVE-2019-7225

Vulnerability details

The vulnerability allows an attacker to gain full access to vulnerable system.

The vulnerability exists due to presence of hard-coded credentials in code, which are IdalMaster:idal123 and exor:exor. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2019-7225

External References

• https://www.us-cert.gov/ics/advisories/icsa-19-178-01
• https://search-ext.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&DocumentPartId=&Action=Launch

Related Security Bulletins

• Multiple vulnerabilities in ABB PB610 Panel Builder 600
• Backdoor account in ABB CP635 HMI