title:  Improper Check for Unusual or Exceptional Conditions
description: Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.
problem types: CWE-754 Improper Check for Unusual or Exceptional Conditions
affected:
{
collectionURL: https://abb.com/plc
defaultStatus: unknown
packageName: PM5xx
product: AC500 V2
vendor: ABB
versions:
lessThan: 2.8.6, status: affected, version: 2.0.0, versionType: release
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
workarounds: Use the communication protocol "Tcp/Ip" instead of "ABB Tcp/Ip Level 2" (i.e. Port 1201 instead of 1200) for the connection between engineering software and PLC.
This protocol/port is not affected by the DoS impact of the vulnerability.