Read the docs
TI-2024-01781 Aliases CVE-2024-1914GHSA-c89w-7vg6-jwf8

NULL pointer dereference in ABB RobotWare 6

Priority LOW 30CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-476.

Summary

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system. Below are reported vulnerabilities in the Robot Ware versions. * IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 * OmniCore- RobotWare 7 < 7.14

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00711 53rd percentileScored 2026-11-07
Fix Fixed RobotWare 6 (ABB): 6.15.06 except 6.10.10 and 6.13.07 RobotWare 7 (ABB): 7.14

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBRobotWare 66.0.0 to before 6.15.06 except 6.10.10 and 6.13.07 6.15.06 except 6.10.10 and 6.13.07 Patch availableCNA
ABBRobotWare 77.0 to before 7.147.14Patch availableCNA
  • RobotWare 6 VendorABB Affected 6.0.0 to before 6.15.06 except 6.10.10 and 6.13.07 Fixed in 6.15.06 except 6.10.10 and 6.13.07 Patch available CNA
  • RobotWare 7 VendorABB Affected 7.0 to before 7.14 Fixed in 7.14 Patch available CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*6.0.0 to before 6.10.10; after 6.10.10, before 6.13.07; after 6.13.07, before 6.15.06VulnerableABB
cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*7.00 to before 7.14VulnerableABB
cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:* Versions 6.0.0 to before 6.10.10; after 6.10.10, before 6.13.07; after 6.13.07, before 6.15.06 Vulnerable ·ABB
  • cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:* Versions 7.00 to before 7.14 Vulnerable ·ABB
  • cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB

Remediation

  • Fix · CNA RobotWare 6 (ABB) Fixed in 6.15.06 except 6.10.10 and 6.13.07
  • Fix · CNA RobotWare 7 (ABB) Fixed in 7.14

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    ABB RobotWare 6, RobotWare 7 6.15.06 except 6.10.10 and 6.13.07, 7.14

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2024-01780 Out-of-bounds write in ABB RobotWare 6Priority LOW 34
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-1914
  2. 2026-10-03 Alias added: GHSA-c89w-7vg6-jwf8

References

Advisory 1

  • TI-2020-08295 RVD#3327: No authentication required for accesing ABB IRC5 FTP server CVSS 3.1CRITICAL 9.8
  • TI-2024-01780 Out-of-bounds write in ABB RobotWare 6 CVSS 3.1HIGH 7.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences