Improper Length Parameter Handling in ABB Freelance Controller Products
CVE-2023-5778

9.2CRITICAL

Key Information:

Vendor

Abb

Status
Freelance Controller Dcp
Freelance Controller Ac700
Freelance Controller Ac800
Freelance Controller Ac900
Vendor
CVE Published:
18 September 2026

What is CVE-2023-5778?

An improper handling of length parameter inconsistency was identified in ABB Freelance Controller products, affecting various versions across DCP, AC700, AC800, and AC900. This vulnerability may allow attackers to exploit the inconsistency in input processing, potentially leading to unauthorized actions or system disruptions. Users of affected products should review their systems and apply necessary security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Freelance Controller AC700 0 <= 2013

Freelance Controller AC700 2013 SP1

Freelance Controller AC700 2016

References

https://search.abb.com/library/Download.aspx?DocumentID=7...

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.