Cp635 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-7225 HIGH POC This Week

The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Abb Cp620 Firmware Cp620 Web Firmware Cp630 Firmware +13

NVD

CVSS 3.1

8.8

EPSS

2.9%

CVE-2019-7229 HIGH POC PATCH This Week

The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via. Rated high severity (CVSS 8.3), this vulnerability is no authentication required. Public exploit code available.

Abb Information Disclosure Board Support Package Un31 Cp620 Firmware Cp620 Web Firmware +5

NVD

CVSS 3.1

8.3

EPSS

1.1%

CVE-2019-7225

EPSS 3% CVSS 8.8

HIGH POC This Week

Authentication Bypass Abb Cp620 Firmware +15

NVD

CVE-2019-7229

EPSS 1% CVSS 8.3

HIGH POC PATCH This Week

Abb Information Disclosure Board Support Package Un31 +7

NVD