ABB Relion REX640 Insufficient file access control
Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.
Description: CWE-732 Incorrect Permission Assignment for Critical Resource
Metrics
Version
Base score
Base severity
Vector
3.1
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Version:3.1
Base score:6.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Although these workarounds will not correct the underlying vulnerability, they can help blocking known
attack vectors.
• Limit the HTTP(s) and FTP(S) to a local network by a firewall
• Use a next generation (OSI layer 7) firewall for blocking the traffic to the userdb.xml file
• Disable remote WHMI and FTP(S) and use local HMI only
Exploits
Credits
ABB thanks Paul Mader and Gianluca Raberger of VERBUND AG's OT Cyber Security Lab for helping to identify the vulnerabilities and protecting our customers.