CVE-2020-10287: abb irb140_firmware Credentials Management Errors

Vulnerability summary

CVE-2020-10287 is a critical (CVSS 9.8) Credentials Management Errors vulnerability in abb irb140_firmware. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.6% of scored vulnerabilities.

Timeline

1. 15-07-2020
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default credentials and consider thereby this an exposure that should be mitigated. Moreover, future deployments should consider that these defaults should be forbidden (user should be forced to change them).

• CWE-255Credentials Management ErrorsWeaknesses in this category are related to the management of credentials.
• CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.