CVE-2019-10995 : What You Need to Know

The ABB CP651 HMI devices before BSP UN30 v1.76 contain secret administrative accounts, posing a security risk.

Understanding CVE-2019-10995

What is CVE-2019-10995?

The ABB CP651 HMI products prior to BSP UN30 v1.76 have hidden administrative accounts used during the provisioning phase, potentially leading to unauthorized access.

The Impact of CVE-2019-10995

The presence of secret administrative accounts in these devices can allow malicious actors to gain unauthorized access, compromising the security and integrity of the system.

Technical Details of CVE-2019-10995

Vulnerability Description

The vulnerability involves the use of hard-coded credentials (CWE-798) in ABB CP651 HMI products, specifically in versions before BSP UN30 v1.76.

Affected Systems and Versions

Product: ABB CP651 HMI products
Versions Affected: BSP UN30 v1.76 and prior

Exploitation Mechanism

The issue arises from the inclusion of hidden administrative accounts meant for provisioning purposes, which can be exploited by attackers to gain unauthorized access.

Mitigation and Prevention

Immediate Steps to Take

Disable or change the default administrative credentials on affected devices.
Implement network segmentation to restrict access to vulnerable devices.
Regularly monitor and audit access logs for any suspicious activities.

Long-Term Security Practices

Conduct regular security assessments and penetration testing to identify and address vulnerabilities.
Stay informed about security advisories and updates from the vendor.

Patching and Updates

Apply patches or updates provided by ABB to address the vulnerability and remove the hardcoded credentials from the affected versions.