vulnerability
ABB B&R PCs
Critical
Summary
This CISA advisory details a vulnerability (CVE-2023-45229 through CVE-2023-45237) affecting ABB B&R PCs, specifically versions of the EDK2 Network Package. The vulnerability, a critical out-of-bounds read, allows for remote code execution, DoS attacks, and potential data exfiltration. ABB has released updates to address this issue, and mitigation strategies include disabling the vulnerable component or restricting network access.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data