vulnerability
ABB LVS MConfig
High
Summary
ABB has identified and announced a vulnerability in its MConfig product versions (<=1.4.9.21) that allows attackers with local network access to potentially extract sensitive information, including passwords, from memory dumps. The vulnerability stems from the application’s handling of memory data and could lead to unauthorized access to user credentials and potential manipulation of ABB switchgear components. ABB recommends immediate software updates and implementing defensive measures to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data