Skip to content
Sign in
CVE-2020-246867.5HighCWE-400

CVE-2020-24686: AC500 V2 webserver denial of service vulnerability

ABB · AC500 V2 products with onboard Ethernet

Affected: ABB AC500 V2 products with onboard Ethernet · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.5%probability of exploitation in the next 30 days
84th percentile
050100

Higher than 84% of scored CVEs

7.5HighCVSS 3.1
LowHigh

DescriptionCVE.org

The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and refuse connections to Automation Builder. The execution of the PLC application is not affected by this vulnerability. This issue affects ABB AC500 V2 products with onboard Ethernet.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • ABB · AC500 V2 products with onboard EthernetAll

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
ABB
Published
February 2021

CoverageNo articles yet

No CyberSIXT article names CVE-2020-24686 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in