Cyber Security Notification

WindRiver VxWorks IPNet Vulnerabilities, impact on ABB Power Grids - Grid Automation products

2019-025-PGGA-VxWorks IPNET

Release date: July 30, 2019

Update date: Jul 31, 2019

Notice

The information in this document is subject to change without notice, and should not be construed as a commitment by ABB.

ABB provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall ABB or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if ABB or its suppliers have been advised of the possibility of such damages.

This document and parts hereof must not be reproduced or copied without written permission from ABB, and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose.

All rights to registrations and trademarks reside with their respective owners.

Copyright © 2019 ABB. All rights reserved.

Vulnerability ID ABB ID: 2019-025-PGGA-VxWorks IPNet

Summary

On the 29^th of July 2019, a series of vulnerabilities from Wind River affecting the VxWorks operating system were made public. That announcement can be found at the following address: https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/

ABB Grid Automation is preparing to provide patches or fixes to address these vulnerabilities in the VxWorks software to the active ABB Grid Automation products that utilize VxWorks. We are currently analyzing and planning the maintenance releases for a future date.

The Wind River vulnerability CVE numbers and titles are listed in the table below:

Affected Products

ABB PGGA is still investigating the potentially affected products, and to date ABB has identified the following products which are affected by the vulnerabilities in VxWorks. This document provides additional information specific for those products:

Mitigation Factors

Recommended security practices and firewall configurations can help protect an industrial control net-work from attacks that originate from outside the network. Such practices include that protection, control & automation systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Protection, control & automation systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Block all non-trusted IP communications.

The impact of the vulnerabilities above can be greatly reduced by implementing a firewall to restrict external network connectivity to the affected devices.

Support

For additional information and support please contact your ABB service organization. Please contact cybersecurity@ch.abb.com for further information. Information about ABB’s cyber security program and capabilities can be found at www.abb.com/cybersecurity.