4HZM000603 PUBLISHED CVSS 8 HIGH

ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

Risk Scores

CVSS v3.1
8
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C

Affected Products

VendorProductVersions
ABB Ability Camera Connect <=1.5.0.14
ABB Ability Camera Connect 1.5.0.15

Timeline

References

Open in Interactive Console →