CVE-2023-5778: Missing Length Check

Description

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB Freelance Controller DCP

Default version status: unaffected

0 to ≤ 2013affected
2013 SP1affected
2016affected
2016 SP1affected
2019affected
2019 SP1affected
2019 SP1 FP1unaffected
2024unaffected

ABB Freelance Controller AC700

Default version status: unaffected

0 to ≤ 2013affected
2013 SP1affected
2016affected
2016 SP1affected
2019affected
2019 SP1affected
2019 SP1 FP1unaffected
2024unaffected

ABB Freelance Controller AC800

Default version status: unaffected

0 to ≤ 2013affected
2013 SP1affected
2016affected
2016 SP1affected
2019affected
2019 SP1affected
2019 SP1 FP1unaffected
2024unaffected

ABB Freelance Controller AC900

Default version status: unaffected

0 to ≤ 2013affected
2013 SP1affected
2016affected
2016 SP1affected
2019affected
2019 SP1affected
2019 SP1 FP1unaffected
2024unaffected

References

https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch ↗