CVE-2024-1914

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1914
An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially crafted message is processed by the system. Below are reported vulnerabilities in the Robot Ware versions. * IRC5- RobotWare 6 < 6.15.06 except 6.10.10, and 6.13.07 * OmniCore- RobotWare 7 < 7.14

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*
History

19 Dec 2025, 14:46

Type Values Removed Values Added
CPE cpe:2.3:h:abb:omnicore_e10:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_c90xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v250xt:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:irc5:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_v400xt:-:*:*:*:*:*:*:*
cpe:2.3:a:abb:robotware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:omnicore_c30:-:*:*:*:*:*:*:*
First Time Abb omnicore C30
Abb omnicore C90xt
Abb omnicore V400xt
Abb irc5
Abb omnicore V250xt
Abb robotware
Abb
Abb omnicore E10
References () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch - () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory

21 Nov 2024, 08:51

Type Values Removed Values Added
References () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch - () https://search.abb.com/library/Download.aspx?DocumentID=SI20330&LanguageCode=en&DocumentPartId=&Action=Launch -
Summary
  • (es) Un atacante que aprovechara con éxito estas vulnerabilidades podría provocar que el robot se detuviera y hacer que el controlador del robot fuera inaccesible. La vulnerabilidad podría potencialmente explotarse para realizar acciones no autorizadas por parte de un atacante. Esta vulnerabilidad surge bajo una condición específica cuando el sistema procesa un mensaje especialmente manipulado. A continuación se informan vulnerabilidades en las versiones de Robot Ware. * IRC5- RobotWare 6 &lt; 6.15.06 excepto 6.10.10 y 6.13.07 * OmniCore- RobotWare 7 &lt; 7.14

14 May 2024, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 16:16

Updated : 2025-12-19 14:46

NVD link : CVE-2024-1914

Mitre link : CVE-2024-1914

CVE.ORG link : CVE-2024-1914

JSON object : View

Products Affected

abb

  • omnicore_e10
  • omnicore_c30
  • omnicore_v400xt
  • robotware
  • irc5
  • omnicore_v250xt
  • omnicore_c90xt
CWE
CWE-476

NULL Pointer Dereference