CVE-2023-5778 — Missing Length Check

Description (CNA)

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

Affected (CNA)

Vendor / product	Versions
ABB / Freelance Controller DCP	affected 0 through 2013; affected 2013 SP1; affected 2016; affected 2016 SP1; affected 2019; affected 2019 SP1; unaffected 2019 SP1 FP1; unaffected 2024
ABB / Freelance Controller AC700	affected 0 through 2013; affected 2013 SP1; affected 2016; affected 2016 SP1; affected 2019; affected 2019 SP1; unaffected 2019 SP1 FP1; unaffected 2024
ABB / Freelance Controller AC800	affected 0 through 2013; affected 2013 SP1; affected 2016; affected 2016 SP1; affected 2019; affected 2019 SP1; unaffected 2019 SP1 FP1; unaffected 2024
ABB / Freelance Controller AC900	affected 0 through 2013; affected 2013 SP1; affected 2016; affected 2016 SP1; affected 2019; affected 2019 SP1; unaffected 2019 SP1 FP1; unaffected 2024

CWE

CWE-130

References

https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.