ABB Pulsar Plus Controller

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to take control of the product or execute arbitrary code.

CVEs (2)

Remediations

• An update is available that resolves a privately reported vulnerability in the product versions listed above. The update is version number 5.0.0 for the application and 5.0.0 for web pages. These updates have been distributed through the appropriate product support channels with the customers.ABB recommends that users ensure the firewall protection is properly configured.A workaround suggested by ABB is to use the controller’s Read/Write Enable/Disable feature for a network port (NET1,WRE=0). The controller can disable all writes over the network port. The factory default is to have the write capability enabled, however, some customers may not want settings to be remotely changed once systems are set. This feature, when set to “Disable”, will allow no changes to be accepted. Once set it can only be changed locally through the front panel. Although these workarounds will not correct the underlying vulnerability, they can help block known attack vectors.For more information, see ABB Security Advisory .

Affected Vendors

Affected Products (2)

Affected Sectors

Chemical, Critical Manufacturing, Dams, Energy, Food and Agriculture, Water and Wastewater