CVE-2024-6157

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6157", "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "state": "PUBLISHED", "assignerShortName": "ABB", "dateReserved": "2024-06-19T07:56:40.921Z", "datePublished": "2024-10-10T12:21:51.072Z", "dateUpdated": "2024-10-10T13:31:37.953Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["IRC5"], "product": "RobotWare 6", "vendor": "ABB", "versions": [{"lessThan": "6.15.06 except 6.10.10, and 6.13.07", "status": "affected", "version": "6.0.0", "versionType": "custom"}]}], "datePublic": "2024-10-10T11:06:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.<br><br>\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.&nbsp;\n\n<span style=\"background-color: rgb(255, 255, 255);\">This vulnerability arises under specific condition when specially crafted message is processed by the system.</span><br><br>Below are reported vulnerabilities in the Robot Ware versions. <br><br>* IRC5- RobotWare 6 &lt; 6.15.06 except 6.10.10, and 6.13.07"}], "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.\n\n\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.\u00a0\n\nThis vulnerability arises under specific condition when specially crafted message is processed by the system.\n\nBelow are reported vulnerabilities in the Robot Ware versions. \n\n* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07"}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB", "dateUpdated": "2024-10-10T12:21:51.072Z"}, "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20337&LanguageCode=en&DocumentPartId=&Action=Launch"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-10T13:31:27.766427Z", "id": "CVE-2024-6157", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-10T13:31:37.953Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6157", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-10T13:31:27.766427Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-10T13:31:32.775Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ABB", "product": "RobotWare 6", "versions": [{"status": "affected", "version": "6.0.0", "lessThan": "6.15.06 except 6.10.10, and 6.13.07", "versionType": "custom"}], "platforms": ["IRC5"], "defaultStatus": "unaffected"}], "datePublic": "2024-10-10T11:06:00.000Z", "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20337&LanguageCode=en&DocumentPartId=&Action=Launch"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.\n\n\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.\u00a0\n\nThis vulnerability arises under specific condition when specially crafted message is processed by the system.\n\nBelow are reported vulnerabilities in the Robot Ware versions. \n\n* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07", "supportingMedia": [{"type": "text/html", "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.<br><br>\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.&nbsp;\n\n<span style=\"background-color: rgb(255, 255, 255);\">This vulnerability arises under specific condition when specially crafted message is processed by the system.</span><br><br>Below are reported vulnerabilities in the Robot Ware versions. <br><br>* IRC5- RobotWare 6 &lt; 6.15.06 except 6.10.10, and 6.13.07", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB", "dateUpdated": "2024-10-10T12:21:51.072Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6157", "state": "PUBLISHED", "dateUpdated": "2024-10-10T13:31:37.953Z", "dateReserved": "2024-06-19T07:56:40.921Z", "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "datePublished": "2024-10-10T12:21:51.072Z", "assignerShortName": "ABB"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["IRC5"], "product": "RobotWare 6", "vendor": "ABB", "versions": [{"lessThan": "6.15.06 except 6.10.10, and 6.13.07", "status": "affected", "version": "6.0.0", "versionType": "custom"}]}], "source": "cybersecurity@ch.abb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker who successfully exploited these vulnerabilities could cause the robot to stop.\n\n\n\nA vulnerability exists in the PROFINET stack included in the RobotWare versions listed below.\u00a0\n\nThis vulnerability arises under specific condition when specially crafted message is processed by the system.\n\nBelow are reported vulnerabilities in the Robot Ware versions. \n\n* IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07"}, {"lang": "es", "value": "Un atacante que aproveche con \u00e9xito estas vulnerabilidades podr\u00eda hacer que el robot se detenga. Existe una vulnerabilidad en la pila PROFINET incluida en las versiones de RobotWare que se enumeran a continuaci\u00f3n. Esta vulnerabilidad surge en condiciones espec\u00edficas cuando el sistema procesa un mensaje especialmente manipulado. A continuaci\u00f3n se indican las vulnerabilidades notificadas en las versiones de RobotWare. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07"}], "id": "CVE-2024-6157", "lastModified": "2026-06-17T08:17:24.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.4, "impactScore": 3.6, "source": "cybersecurity@ch.abb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-6157", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-10-10T13:31:27.766427Z", "version": "2.0.3"}}]}, "published": "2024-10-10T13:15:14.370", "references": [{"source": "cybersecurity@ch.abb.com", "url": "https://search.abb.com/library/Download.aspx?DocumentID=SI20337&LanguageCode=en&DocumentPartId=&Action=Launch"}], "sourceIdentifier": "cybersecurity@ch.abb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "cybersecurity@ch.abb.com", "type": "Secondary"}]}

{}

{"created": "2025-07-12T22:09:27.995893+00:00", "updated": "2025-07-12T22:09:27.995941+00:00", "vendors": ["abb", "abb$PRODUCT$robotware"]}