[Control systems] ABB security advisory (AV24-684)

Serial number: AV24-684
Date: November 29, 2024

On November 29, 2024, ABB published a security advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

• ABB mapp Cockpit – version 5.x
• ABB mapp View – version 5.x
• ABB mapp Services (only if mpUserX or mpCodeBox is used) – version 5.x
• ABB mapp Motion – version 5.x
• ABB mapp Vision – version 5.x

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Authentication bypass flaw in several mapp components CVE ID: CVE-2024-10490 (PDF, 147 KB)
• ABB Cyber security alerts and notifications