Files
vuln-nvd/data/2024/CVE-2024-1913.json
T

2 lines
4.8 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["IRC5"],"product":"RobotWare 6","vendor":"ABB","versions":[{"lessThan":"6.15.06 except 6.10.10 and 6.13.07","status":"affected","version":"6.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["OmniCore"],"product":"RobotWare 7","vendor":"ABB","versions":[{"lessThan":"7.14","status":"affected","version":"7.0","versionType":"custom"}]}],"source":"cybersecurity@ch.abb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*","matchCriteriaId":"376A0E20-4424-4B7D-BDB6-2CC515A95577","versionEndExcluding":"6.10.10","versionStartIncluding":"6.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*","matchCriteriaId":"118FABF7-558E-4056-99F7-39B0714D98DD","versionEndExcluding":"6.13.07","versionStartExcluding":"6.10.10","vulnerable":true},{"criteria":"cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*","matchCriteriaId":"CEA6311F-F2BD-47FE-A0D0-FDF04C2FC7F2","versionEndExcluding":"6.15.06","versionStartExcluding":"6.13.07","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*","matchCriteriaId":"BB3C36DB-C7BB-4EB2-AE54-CE72067D1592","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*","matchCriteriaId":"8FA992BC-1586-4593-9591-07669053B169","versionEndExcluding":"7.14","versionStartIncluding":"7.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*","matchCriteriaId":"74FC3FD0-0A15-4013-B235-123088834F4F","vulnerable":false},{"criteria":"cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*","matchCriteriaId":"D55FCF6A-F680-4E92-B8AD-F68AC9C83E0B","vulnerable":false},{"criteria":"cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*","matchCriteriaId":"923DB786-3E6C-435E-8E6F-36EE29F29A35","vulnerable":false},{"criteria":"cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*","matchCriteriaId":"DF19AA37-7DBD-4228-BC40-B80D1EE92566","vulnerable":false},{"criteria":"cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*","matchCriteriaId":"A1AC9810-1788-4A7E-8661-EACB25B9B24D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nAn attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. \n\nThe vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system.\n\nBelow are reported vulnerabilities in the Robot Ware versions.\n\n * IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 \n * OmniCore- RobotWare 7 < 7.14\n\n"},{"lang":"es","value":"Un atacante que aprovechara con éxito estas vulnerabilidades podría provocar que el robot se detuviera, hacer que el controlador del robot fuera inaccesible o ejecutar código arbitrario. La vulnerabilidad podría potencialmente explotarse para realizar acciones no autorizadas por parte de un atacante. Esta vulnerabilidad surge bajo una condición específica cuando el sistema procesa un mensaje especialmente manipulado. A continuación se informan vulnerabilidades en las versiones de Robot Ware. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07 * OmniCore- RobotWare 7 &lt; 7.14"}],"id":"CVE-2024-1913","lastModified":"2026-06-17T07:05:16.453","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"cybersecurity@ch.abb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1913","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-05-14T15:23:33.710572Z","version":"2.0.3"}}]},"published":"2024-05-14T16:16:01.860","references":[{"source":"cybersecurity@ch.abb.com","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch"}],"sourceIdentifier":"cybersecurity@ch.abb.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"cybersecurity@ch.abb.com","type":"Secondary"}]}