Multiple vulnerabilities have been identified in various industrial control system products from different vendors including ABB, CP Plus, Eppendorf, Frontier X, Jinan USR IOT Technology Limited, KMW, MacGregor, Schneider Electric, Terra, and XCharge. Affected versions are specified per product, with advisories recommending users to apply mitigations and updates where available.
| Vendor | Product | Versions |
|---|---|---|
| B&R Industrial Automation GmbH | PPT30 Operating System | ABB AC500 V2 – versions prior to 2.5.2 and 2.5.3, ABB Ability Camera Connect – versions prior to 1.5.0.14 and 1.5.0.15, ABB Ability Zenon – versions 7.50 to 14, ABB B&R Automation Runtime – versions prior to 6.3 and Q4.93, ABB EIBPORT V3 KNX (2CLA963710W1001) / (2CSM256242R2001) – versions prior to 3.9.2, ABB EIBPORT V3 KNX GSM (2CLA963720W1001) – versions prior to 3.9.2, ABB LVS MConfig – versions 1.4.9.21 and prior, CP Plus 8 Ch. Network Video Recorder – multiple versions, Eppendorf BioFlo 320 – all versions, Frontier X Android application – versions prior to v15.0.0, Frontier X IOS application– versions prior to v25.0.0, Frontier X2 – all versions, Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter – version 7.03T.07, KMW CCTV Security Cameras – versions KM-IP521 IPCAM_V4.04.91.230307 and KM-IP421 IPCAM_V4.04.53.210416, MacGregor Voyage Data Recorder (VDR) G4e – versions prior to V5.250, Schneider Electric EcoStruxure Machine Expert HVAC – versions prior to 1.10.0, Switch Actuator 4 DU – all versions, Switch Actuator, door/light 4 DU – all versions, Terra AC Wallbox – multiple versions and models, XCharge C6 – version C6, versions prior to 1.8.0 |
Added vendor B&R Industrial Automation GmbH and product PPT30 Operating System with new affected version prior to 1.8.0, and marked exploit availability and active exploitation.
Initial creation
