« Volver al listado

CVE-2024-6157

Estado: AplazadaMedia (5.1)—

An attacker who successfully exploited these vulnerabilities could cause the robot to stop.

A vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.

This vulnerability arises under specific condition when specially crafted message is processed by the system.

Below are reported vulnerabilities in the Robot Ware versions.

* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

ABB — RobotwareAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-6157",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-6157",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-10T13:31:27.766427Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cybersecurity@ch.abb.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.4
      }
    ]
  },
  "affected": [
    {
      "source": "cybersecurity@ch.abb.com",
      "affectedData": [
        {
          "vendor": "ABB",
          "product": "RobotWare 6",
          "versions": [
            {
              "status": "affected",
              "version": "6.0.0",
              "lessThan": "6.15.06 except 6.10.10, and 6.13.07",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "IRC5"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-10-10T13:15:14.370",
  "references": [
    {
      "url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20337&LanguageCode=en&DocumentPartId=&Action=Launch",
      "source": "cybersecurity@ch.abb.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cybersecurity@ch.abb.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.\n\n\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below. \n\nThis vulnerability arises under specific condition when specially crafted message is processed by the system.\n\nBelow are reported vulnerabilities in the Robot Ware versions. \n\n* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07"
    },
    {
      "lang": "es",
      "value": "Un atacante que aproveche con éxito estas vulnerabilidades podría hacer que el robot se detenga. Existe una vulnerabilidad en la pila PROFINET incluida en las versiones de RobotWare que se enumeran a continuación. Esta vulnerabilidad surge en condiciones específicas cuando el sistema procesa un mensaje especialmente manipulado. A continuación se indican las vulnerabilidades notificadas en las versiones de RobotWare. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07"
    }
  ],
  "lastModified": "2026-06-17T08:17:24.110",
  "sourceIdentifier": "cybersecurity@ch.abb.com"
}