ABB LVS MConfig

Risk Summary

ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory. An attacker with access to local networks who successfully exploits vulnerability could have access to application’s sensitive information. ABB strongly advises customers to update MConfig with latest software version.

CVEs (1)

Remediations

• The vulnerability is resolved in the following product versions: MConfig version 1.4.9.22 ABB advises users to update their devices to the latest software version. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section “Mitigation factors” for more information

Affected Vendors

Affected Products (2)

Affected Sectors

Chemical, Critical Manufacturing, Energy, Food and Agriculture, Transportation Systems, Water and Wastewater