Log in Start free

Vulnerability · Published Sep 18, 2026 · Assigned by ABB

CVE-2023-5778Missing Length Check

High 7.5

In plain English

A high-severity security flaw in Freelance Controller AC700 from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 60.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

Affected products (as reported)

VendorProductVersions
ABB Freelance Controller DCP 0 – through 20132013 SP120162016 SP120192019 SP1
ABB Freelance Controller AC700 0 – through 20132013 SP120162016 SP120192019 SP1
ABB Freelance Controller AC800 0 – through 20132013 SP120162016 SP120192019 SP1
ABB Freelance Controller AC900 0 – through 20132013 SP120162016 SP120192019 SP1

Weakness: CWE-130 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References