EUVD-2026-70412
GHSA-3jg5-p6xv-g24v
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable unauthenticated exploitation; scope changes to downstream OT systems with high C/I; no availability impact confirmed.
Primary rating from Vendor (ABB).
CVSS VectorVendor: ABB
Lifecycle Timeline
7DescriptionCVE.org
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services.
This issue affects mapp Audit used in mapp Services: before 6.8.0.
AnalysisAI
Weak credential management in the mapp Audit component of B&R Industrial Automation's mapp Services framework allows network-accessible, unauthenticated attackers to leverage predictable or default credentials to gain unauthorized access with high confidentiality and integrity impact on downstream industrial systems connected through the platform. All mapp Services versions prior to 6.8.0 are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Successful exploitation requires that the target is running mapp Services with the mapp Audit component deployed and that the component is reachable over the network from the attacker's position - the CVSS 4.0 AT:P modifier confirms that not all deployment configurations are equally exposed; instances where mapp Audit is not deployed or is network-isolated may not be reachable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.0 reflects a meaningful but not maximum-severity finding, with the AT:P modifier (partial attack target condition) preventing a higher rating despite AV:N/PR:N/UI:N. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade mapp Services to version 6.8.0 or later, as specified in B&R security advisory SA26P012 (https://br-cws-assets.de-fra-1.linodeobjects.com/SA26P012-28f0e5aa.pdf); this is the primary and vendor-confirmed fix. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of mapp Services deployments across the organization, document all installed versions, and identify which systems are production-critical. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-1391 – Use of Weak Credentials
View allShare
External POC / Exploit Code
Leaving vuln.today