CVE-2019-7229 - CVE House
Back to Database
Status published High CVE-2019-7229

The ABB CP635 HMI uses two different transmission methods to...

Vulnerability Description

The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-7229

Credits & Attribution

No credits recorded in the NVD database.

References

More from abb

View All →
CVE-2020-11420
UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker...
Medium 6.5
CVE-2019-7232
The ABB IDAL HTTP server is vulnerable to a buffer...
High 8.8
CVE-2019-7231
The ABB IDAL FTP server is vulnerable to a buffer...
Medium 5.7
CVE-2019-7230
The ABB IDAL FTP server mishandles format strings in a...
High 8.8
CVE-2019-7228
The ABB IDAL HTTP server mishandles format strings in a...
High 8.8

Affected Vendor

Affected Software

board support package un31, cp620 firmware, cp620-web firmware, cp630 firmware, cp630-web firmware, cp635 firmware, cp635-b firmware, cp635-web firmware
Vulnerable Versions:
0

Timeline

Official Publish: June 24th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.