« Volver al listado

CVE-2024-1914

Estado: AnalizadaMedia (6.5)—

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible.

The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system.

Below are reported vulnerabilities in the Robot Ware versions.

* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 * OmniCore- RobotWare 7 < 7.14

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

ABB — Robotware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-1914",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1914",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-14T15:06:59.720219Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cybersecurity@ch.abb.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cybersecurity@ch.abb.com",
      "affectedData": [
        {
          "vendor": "ABB",
          "product": "RobotWare 6",
          "versions": [
            {
              "status": "affected",
              "version": "6.0.0",
              "lessThan": "6.15.06 except 6.10.10 and 6.13.07 ",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "IRC5"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ABB",
          "product": "RobotWare 7",
          "versions": [
            {
              "status": "affected",
              "version": "7.0",
              "lessThan": "7.14",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "OmniCore"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:abb:robotware:6.0.0:*:*:*:*:*:*:*"
          ],
          "vendor": "abb",
          "product": "robotware",
          "versions": [
            {
              "status": "affected",
              "version": "6.0.0",
              "lessThan": "6.15.06",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.10.10"
            },
            {
              "status": "unaffected",
              "version": "6.13.07"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:abb:robotware:7.0:*:*:*:*:*:*:*"
          ],
          "vendor": "abb",
          "product": "robotware",
          "versions": [
            {
              "status": "affected",
              "version": "7.0",
              "lessThan": "7.14",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-05-14T16:16:03.143",
  "references": [
    {
      "url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cybersecurity@ch.abb.com"
    },
    {
      "url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cybersecurity@ch.abb.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible.  \n\nThe vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system. \n\nBelow are reported vulnerabilities in the Robot Ware versions. \n\n* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 \n* OmniCore- RobotWare 7 < 7.14"
    },
    {
      "lang": "es",
      "value": "Un atacante que aprovechara con éxito estas vulnerabilidades podría provocar que el robot se detuviera y hacer que el controlador del robot fuera inaccesible. La vulnerabilidad podría potencialmente explotarse para realizar acciones no autorizadas por parte de un atacante. Esta vulnerabilidad surge bajo una condición específica cuando el sistema procesa un mensaje especialmente manipulado. A continuación se informan vulnerabilidades en las versiones de Robot Ware. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07 * OmniCore- RobotWare 7 &lt; 7.14"
    }
  ],
  "lastModified": "2026-06-17T07:05:16.610",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "376A0E20-4424-4B7D-BDB6-2CC515A95577",
              "versionEndExcluding": "6.10.10",
              "versionStartIncluding": "6.0.0"
            },
            {
              "criteria": "cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "118FABF7-558E-4056-99F7-39B0714D98DD",
              "versionEndExcluding": "6.13.07",
              "versionStartExcluding": "6.10.10"
            },
            {
              "criteria": "cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEA6311F-F2BD-47FE-A0D0-FDF04C2FC7F2",
              "versionEndExcluding": "6.15.06",
              "versionStartExcluding": "6.13.07"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BB3C36DB-C7BB-4EB2-AE54-CE72067D1592"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FA992BC-1586-4593-9591-07669053B169",
              "versionEndExcluding": "7.14",
              "versionStartIncluding": "7.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "74FC3FD0-0A15-4013-B235-123088834F4F"
            },
            {
              "criteria": "cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D55FCF6A-F680-4E92-B8AD-F68AC9C83E0B"
            },
            {
              "criteria": "cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "923DB786-3E6C-435E-8E6F-36EE29F29A35"
            },
            {
              "criteria": "cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DF19AA37-7DBD-4228-BC40-B80D1EE92566"
            },
            {
              "criteria": "cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A1AC9810-1788-4A7E-8661-EACB25B9B24D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cybersecurity@ch.abb.com"
}