1. Home
  2. CVE Database
  3. CVE-2020-10287
CRITICAL · 9.8

CVE-2020-10287

The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set u...

Vulnerability Description

The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default credentials and consider thereby this an exposure that should be mitigated. Moreover, future deployments should consider that these defaults should be forbidden (user should be forced to change them).

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AbbIrb140 Firmware-
AbbIrb140-
AbbIrc5 Firmware-
AbbIrc5-

Related Weaknesses (CWE)

CWE-522CWE-255

References

FAQ

What is CVE-2020-10287?

CVE-2020-10287 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set u...

How severe is CVE-2020-10287?

CVE-2020-10287 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-10287?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Irb140 Firmware, Abb Irb140, Abb Irc5 Firmware, Abb Irc5.