CVE-2024-1913

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1913

7.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code.  The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system. Below are reported vulnerabilities in the Robot Ware versions. * IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 * OmniCore- RobotWare 7 < 7.14

References
Link Resource
https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*
History

19 Dec 2025, 14:46

Type Values Removed Values Added
References () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch - () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory
CPE cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*
First Time Abb omnicore V250xt
Abb omnicore C30
Abb omnicore V400xt
Abb irc5
Abb omnicore E10
Abb omnicore C90xt
Abb
Abb robotware

21 Nov 2024, 08:51

Type Values Removed Values Added
References () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch - () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch -
Summary
  • (es) Un atacante que aprovechara con éxito estas vulnerabilidades podría provocar que el robot se detuviera, hacer que el controlador del robot fuera inaccesible o ejecutar código arbitrario. La vulnerabilidad podría potencialmente explotarse para realizar acciones no autorizadas por parte de un atacante. Esta vulnerabilidad surge bajo una condición específica cuando el sistema procesa un mensaje especialmente manipulado. A continuación se informan vulnerabilidades en las versiones de Robot Ware. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07 * OmniCore- RobotWare 7 &lt; 7.14

14 May 2024, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 16:16

Updated : 2025-12-19 14:46

NVD link : CVE-2024-1913

Mitre link : CVE-2024-1913

CVE.ORG link : CVE-2024-1913

JSON object : View

Products Affected

abb

CWE
CWE-787

Out-of-bounds Write