Read the docs
TI-2024-01780 Aliases CVE-2024-1913GHSA-2qxx-wjxw-fg87

Out-of-bounds write in ABB RobotWare 6

Priority LOW 34CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code.  The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system. Below are reported vulnerabilities in the Robot Ware versions. * IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 * OmniCore- RobotWare 7 < 7.14

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00691 53rd percentileScored 2026-11-07
Fix Fixed RobotWare 6 (ABB): 6.15.06 except 6.10.10 and 6.13.07RobotWare 7 (ABB): 7.14

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBRobotWare 66.0.0 to before 6.15.06 except 6.10.10 and 6.13.076.15.06 except 6.10.10 and 6.13.07Patch availableCNA
ABBRobotWare 77.0 to before 7.147.14Patch availableCNA
  • RobotWare 6 VendorABB Affected 6.0.0 to before 6.15.06 except 6.10.10 and 6.13.07 Fixed in 6.15.06 except 6.10.10 and 6.13.07 Patch available CNA
  • RobotWare 7 VendorABB Affected 7.0 to before 7.14 Fixed in 7.14 Patch available CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*6.0.0 to before 6.10.10; after 6.10.10, before 6.13.07; after 6.13.07, before 6.15.06VulnerableABB
cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*7.00 to before 7.14VulnerableABB
cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:* Versions 6.0.0 to before 6.10.10; after 6.10.10, before 6.13.07; after 6.13.07, before 6.15.06 Vulnerable ·ABB
  • cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:* Versions 7.00 to before 7.14 Vulnerable ·ABB
  • cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB

Remediation

  • Fix · CNA RobotWare 6 (ABB) Fixed in 6.15.06 except 6.10.10 and 6.13.07
  • Fix · CNA RobotWare 7 (ABB) Fixed in 7.14

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    ABB RobotWare 6, RobotWare 7 6.15.06 except 6.10.10 and 6.13.07, 7.14

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2024-01781 NULL pointer dereference in ABB RobotWare 6Priority LOW 30
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-1913
  2. 2026-10-03 Alias added: GHSA-2qxx-wjxw-fg87

References

Advisory 1

  • TI-2020-08295 RVD#3327: No authentication required for accesing ABB IRC5 FTP server CVSS 3.1CRITICAL 9.8
  • TI-2024-01781 NULL pointer dereference in ABB RobotWare 6 CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences