CVE-2024-6157

{"id": "CVE-2024-6157", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cybersecurity@ch.abb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.4}]}, "published": "2024-10-10T13:15:14.370", "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20337&LanguageCode=en&DocumentPartId=&Action=Launch", "source": "cybersecurity@ch.abb.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "cybersecurity@ch.abb.com", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.\n\n\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.\u00a0\n\nThis vulnerability arises under specific condition when specially crafted message is processed by the system.\n\nBelow are reported vulnerabilities in the Robot Ware versions. \n\n* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07"}, {"lang": "es", "value": "Un atacante que aproveche con \u00e9xito estas vulnerabilidades podr\u00eda hacer que el robot se detenga. Existe una vulnerabilidad en la pila PROFINET incluida en las versiones de RobotWare que se enumeran a continuaci\u00f3n. Esta vulnerabilidad surge en condiciones espec\u00edficas cuando el sistema procesa un mensaje especialmente manipulado. A continuaci\u00f3n se indican las vulnerabilidades notificadas en las versiones de RobotWare. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07"}], "lastModified": "2024-10-15T12:58:51.050", "sourceIdentifier": "cybersecurity@ch.abb.com"}