{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-10490", "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "state": "PUBLISHED", "assignerShortName": "ABB", "dateReserved": "2024-10-29T11:13:34.960Z", "datePublished": "2024-12-02T08:46:44.044Z", "dateUpdated": "2024-12-02T22:11:21.408Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "B&R mapp Cockpit", "vendor": "B&R Industrial Automation GmbH", "versions": [{"lessThan": "6.0;0", "status": "affected", "version": "5.0;0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "B&R mapp View", "vendor": "B&R Industrial Automation GmbH", "versions": [{"lessThan": "6.0", "status": "affected", "version": "5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "B&R mapp Services", "vendor": "B&R Industrial Automation GmbH", "versions": [{"lessThan": "6.0", "status": "affected", "version": "5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "B&R mapp Motion", "vendor": "B&R Industrial Automation GmbH", "versions": [{"lessThan": "6.0", "status": "affected", "version": "5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "B&R mapp Vision", "vendor": "B&R Industrial Automation GmbH", "versions": [{"lessThan": "6.0", "status": "affected", "version": "5.0", "versionType": "custom"}]}], "datePublic": "2024-11-27T04:12:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An \u201cAuthentication Bypass Using an Alternate Path or Channel\u201d vulnerability in the OPC UA Server configuration required for B&amp;R mapp Cockpit before 6.0, B&amp;R mapp View before 6.0, B&amp;R mapp Services before 6.0, B&amp;R mapp Motion before 6.0 and B&amp;R mapp Vision before 6.0 may be used by an unauthenticated network-based attacker to cause information disclosure, unintended change of data, or denial of service conditions.<br>B&amp;R mapp Services is only affected, when mpUserX or mpCodeBox are used in the Automation Studio project.<br>"}], "value": "An \u201cAuthentication Bypass Using an Alternate Path or Channel\u201d vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an unauthenticated network-based attacker to cause information disclosure, unintended change of data, or denial of service conditions.\nB&R mapp Services is only affected, when mpUserX or mpCodeBox are used in the Automation Studio project."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 8.4, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-288", "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB", "dateUpdated": "2024-12-02T08:46:48.918Z"}, "references": [{"url": "https://www.br-automation.com/fileadmin/SA22P014-90c4aa35.pdf"}], "source": {"discovery": "UNKNOWN"}, "title": "Authentication bypass flaw in several mapp components", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Enforce client device authentication in the configuration of the OPC UA server. Configure a proper \u201cSecurityPolicy\u201d for OPC UA Server (<a target=\"_blank\" rel=\"nofollow\" href=\"https://help.br-automation.com/#/en/4/communication/opcua/runtime/opcua_config_security.html\">Automation Help</a>) and select a \u201cCertificateStore configuration\u201d which has \u201cValidate SSL communication partner\u201d set to \u201con\u201d (<a target=\"_blank\" rel=\"nofollow\" href=\"https://help.br-automation.com/#/en/4/access_and_security%2Fssl%2Fssl_configuration.html\">Automation Help</a>).</p><p>Limit access to the OPC UA Server (default 4840/tcp) to IP addresses or IP subnets which are running instances of impacted mapp components and legitime OPC UA clients using the B&amp;R Automation Runtime host-based firewall. Ensure only trusted personal is able to access devices with the specified IP (range) and enforce strict authentication on these devices.</p><p>Please be aware that B&amp;R Automation Runtime and its services (like mapp components) are not intended to be directly connected to the internet at any time. Customers are advised to use the host-based firewall as well as an external control network firewall to limit access to each service running at B&amp;R Automation Runtime. Additionally, consider granting access from the outside of the control network only to specific timeframes (e.g. for maintenance).</p><p><b>mapp View</b></p><p>For customers only using the OPC UA Server for their mapp View Visualization, block all incoming traffic to the OPC UA Server (default port 4840/tcp) using the B&amp;R Automation Runtime host-based firewall. Blocking external traffic on the OPC UA Server has no impact on the functionality of mapp View.</p>\n\n<br>"}], "value": "Enforce client device authentication in the configuration of the OPC UA server. Configure a proper \u201cSecurityPolicy\u201d for OPC UA Server ( Automation Help https://help.br-automation.com/#/en/4/communication/opcua/runtime/opcua_config_security.html ) and select a \u201cCertificateStore configuration\u201d which has \u201cValidate SSL communication partner\u201d set to \u201con\u201d ( Automation Help https://help.br-automation.com/#/en/4/access_and_security%2Fssl%2Fssl_configuration.html ).\n\nLimit access to the OPC UA Server (default 4840/tcp) to IP addresses or IP subnets which are running instances of impacted mapp components and legitime OPC UA clients using the B&R Automation Runtime host-based firewall. Ensure only trusted personal is able to access devices with the specified IP (range) and enforce strict authentication on these devices.\n\nPlease be aware that B&R Automation Runtime and its services (like mapp components) are not intended to be directly connected to the internet at any time. Customers are advised to use the host-based firewall as well as an external control network firewall to limit access to each service running at B&R Automation Runtime. Additionally, consider granting access from the outside of the control network only to specific timeframes (e.g. for maintenance).\n\nmapp View\n\nFor customers only using the OPC UA Server for their mapp View Visualization, block all incoming traffic to the OPC UA Server (default port 4840/tcp) using the B&R Automation Runtime host-based firewall. Blocking external traffic on the OPC UA Server has no impact on the functionality of mapp View."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-02T22:11:11.404146Z", "id": "CVE-2024-10490", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T22:11:21.408Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-10490", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-02T22:11:11.404146Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T22:11:18.013Z"}}], "cna": {"title": "Authentication bypass flaw in several mapp components", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "B&R Industrial Automation GmbH", "product": "B&R mapp Cockpit", "versions": [{"status": "affected", "version": "5.0;0", "lessThan": "6.0;0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "B&R Industrial Automation GmbH", "product": "B&R mapp View", "versions": [{"status": "affected", "version": "5.0", "lessThan": "6.0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "B&R Industrial Automation GmbH", "product": "B&R mapp Services", "versions": [{"status": "affected", "version": "5.0", "lessThan": "6.0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "B&R Industrial Automation GmbH", "product": "B&R mapp Motion", "versions": [{"status": "affected", "version": "5.0", "lessThan": "6.0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "B&R Industrial Automation GmbH", "product": "B&R mapp Vision", "versions": [{"status": "affected", "version": "5.0", "lessThan": "6.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2024-11-27T04:12:00.000Z", "references": [{"url": "https://www.br-automation.com/fileadmin/SA22P014-90c4aa35.pdf"}], "workarounds": [{"lang": "en", "value": "Enforce client device authentication in the configuration of the OPC UA server. Configure a proper \u201cSecurityPolicy\u201d for OPC UA Server ( Automation Help https://help.br-automation.com/#/en/4/communication/opcua/runtime/opcua_config_security.html ) and select a \u201cCertificateStore configuration\u201d which has \u201cValidate SSL communication partner\u201d set to \u201con\u201d ( Automation Help https://help.br-automation.com/#/en/4/access_and_security%2Fssl%2Fssl_configuration.html ).\n\nLimit access to the OPC UA Server (default 4840/tcp) to IP addresses or IP subnets which are running instances of impacted mapp components and legitime OPC UA clients using the B&R Automation Runtime host-based firewall. Ensure only trusted personal is able to access devices with the specified IP (range) and enforce strict authentication on these devices.\n\nPlease be aware that B&R Automation Runtime and its services (like mapp components) are not intended to be directly connected to the internet at any time. Customers are advised to use the host-based firewall as well as an external control network firewall to limit access to each service running at B&R Automation Runtime. Additionally, consider granting access from the outside of the control network only to specific timeframes (e.g. for maintenance).\n\nmapp View\n\nFor customers only using the OPC UA Server for their mapp View Visualization, block all incoming traffic to the OPC UA Server (default port 4840/tcp) using the B&R Automation Runtime host-based firewall. Blocking external traffic on the OPC UA Server has no impact on the functionality of mapp View.", "supportingMedia": [{"type": "text/html", "value": "<p>Enforce client device authentication in the configuration of the OPC UA server. Configure a proper \u201cSecurityPolicy\u201d for OPC UA Server (<a target=\"_blank\" rel=\"nofollow\" href=\"https://help.br-automation.com/#/en/4/communication/opcua/runtime/opcua_config_security.html\">Automation Help</a>) and select a \u201cCertificateStore configuration\u201d which has \u201cValidate SSL communication partner\u201d set to \u201con\u201d (<a target=\"_blank\" rel=\"nofollow\" href=\"https://help.br-automation.com/#/en/4/access_and_security%2Fssl%2Fssl_configuration.html\">Automation Help</a>).</p><p>Limit access to the OPC UA Server (default 4840/tcp) to IP addresses or IP subnets which are running instances of impacted mapp components and legitime OPC UA clients using the B&amp;R Automation Runtime host-based firewall. Ensure only trusted personal is able to access devices with the specified IP (range) and enforce strict authentication on these devices.</p><p>Please be aware that B&amp;R Automation Runtime and its services (like mapp components) are not intended to be directly connected to the internet at any time. Customers are advised to use the host-based firewall as well as an external control network firewall to limit access to each service running at B&amp;R Automation Runtime. Additionally, consider granting access from the outside of the control network only to specific timeframes (e.g. for maintenance).</p><p><b>mapp View</b></p><p>For customers only using the OPC UA Server for their mapp View Visualization, block all incoming traffic to the OPC UA Server (default port 4840/tcp) using the B&amp;R Automation Runtime host-based firewall. Blocking external traffic on the OPC UA Server has no impact on the functionality of mapp View.</p>\n\n<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An \u201cAuthentication Bypass Using an Alternate Path or Channel\u201d vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an unauthenticated network-based attacker to cause information disclosure, unintended change of data, or denial of service conditions.\nB&R mapp Services is only affected, when mpUserX or mpCodeBox are used in the Automation Studio project.", "supportingMedia": [{"type": "text/html", "value": "An \u201cAuthentication Bypass Using an Alternate Path or Channel\u201d vulnerability in the OPC UA Server configuration required for B&amp;R mapp Cockpit before 6.0, B&amp;R mapp View before 6.0, B&amp;R mapp Services before 6.0, B&amp;R mapp Motion before 6.0 and B&amp;R mapp Vision before 6.0 may be used by an unauthenticated network-based attacker to cause information disclosure, unintended change of data, or denial of service conditions.<br>B&amp;R mapp Services is only affected, when mpUserX or mpCodeBox are used in the Automation Studio project.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel"}]}], "providerMetadata": {"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB", "dateUpdated": "2024-12-02T08:46:48.918Z"}}}, "cveMetadata": {"cveId": "CVE-2024-10490", "state": "PUBLISHED", "dateUpdated": "2024-12-02T22:11:21.408Z", "dateReserved": "2024-10-29T11:13:34.960Z", "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "datePublished": "2024-12-02T08:46:44.044Z", "assignerShortName": "ABB"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "An \u201cAuthentication Bypass Using an Alternate Path or Channel\u201d vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an unauthenticated network-based attacker to cause information disclosure, unintended change of data, or denial of service conditions.\nB&R mapp Services is only affected, when mpUserX or mpCodeBox are used in the Automation Studio project."}, {"lang": "es", "value": "Una vulnerabilidad de \u201cOmisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo\u201d en la configuraci\u00f3n del servidor OPC UA requerida para B&amp;R mapp Cockpit anterior a la versi\u00f3n 6.0, B&amp;R mapp View anterior a la versi\u00f3n 6.0, B&amp;R mapp Services anterior a la versi\u00f3n 6.0, B&amp;R mapp Motion anterior a la versi\u00f3n 6.0 y B&amp;R mapp Vision anterior a la versi\u00f3n 6.0 puede ser utilizada por un atacante no autenticado basado en la red para provocar la divulgaci\u00f3n de informaci\u00f3n, un cambio no intencionado de datos o condiciones de denegaci\u00f3n de servicio. B&amp;R mapp Services solo se ve afectado cuando se utilizan mpUserX o mpCodeBox en el proyecto de Automation Studio."}], "id": "CVE-2024-10490", "lastModified": "2024-12-02T09:15:04.613", "metrics": {"cvssMetricV40": [{"cvssData": {"attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "HIGH", "vulnerableSystemConfidentiality": "LOW", "vulnerableSystemIntegrity": "HIGH"}, "source": "cybersecurity@ch.abb.com", "type": "Secondary"}]}, "published": "2024-12-02T09:15:04.613", "references": [{"source": "cybersecurity@ch.abb.com", "url": "https://www.br-automation.com/fileadmin/SA22P014-90c4aa35.pdf"}], "sourceIdentifier": "cybersecurity@ch.abb.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-288"}], "source": "cybersecurity@ch.abb.com", "type": "Primary"}]}

{}