CVE-2023-5778 PUBLISHED

Missing Length Check

Assigner: ABB
Reserved: 26.10.2023 Published: 18.09.2026 Updated: 18.09.2026

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.

This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/AU:Y/R:U/V:C/RE:H
CVSS Score: 9.2

Product Status

Vendor ABB
Product Freelance Controller DCP
Versions Default: unaffected
  • affected from 0 to 2013 (incl.)
  • Version 2013 SP1 is affected
  • Version 2016 is affected
  • Version 2016 SP1 is affected
  • Version 2019 is affected
  • Version 2019 SP1 is affected
  • Version 2019 SP1 FP1 is unaffected
  • Version 2024 is unaffected
Vendor ABB
Product Freelance Controller AC700
Versions Default: unaffected
  • affected from 0 to 2013 (incl.)
  • Version 2013 SP1 is affected
  • Version 2016 is affected
  • Version 2016 SP1 is affected
  • Version 2019 is affected
  • Version 2019 SP1 is affected
  • Version 2019 SP1 FP1 is unaffected
  • Version 2024 is unaffected
Vendor ABB
Product Freelance Controller AC800
Versions Default: unaffected
  • affected from 0 to 2013 (incl.)
  • Version 2013 SP1 is affected
  • Version 2016 is affected
  • Version 2016 SP1 is affected
  • Version 2019 is affected
  • Version 2019 SP1 is affected
  • Version 2019 SP1 FP1 is unaffected
  • Version 2024 is unaffected
Vendor ABB
Product Freelance Controller AC900
Versions Default: unaffected
  • affected from 0 to 2013 (incl.)
  • Version 2013 SP1 is affected
  • Version 2016 is affected
  • Version 2016 SP1 is affected
  • Version 2019 is affected
  • Version 2019 SP1 is affected
  • Version 2019 SP1 FP1 is unaffected
  • Version 2024 is unaffected

References

Problem Types

  • CWE-130 Improper handling of length parameter inconsistency CWE