CVE-2023-0426: Stack overflow in filename or in boundary

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-07 · updated 2026-06-17
Weakness: CWE-121

Description

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make the product inaccessible. Stack-based Buffer Overflow vulnerability in ABB Freelance controllers AC 700F (conroller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects: Freelance controllers AC 700F: from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019 , through Freelance 2019 SP1, through Freelance 2019 SP1 FP1; Freelance controllers AC 900F: through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.

Affected products

ABB Ac700F Firmware: from 9.0.0 before 9.2.0; 9.2.0, 9.2.0-sp1 — fixed in 9.2.0
ABB Freelance 2013: all versions
ABB Freelance 2016: all versions
ABB Freelance 2019: all versions

How to fix

Upgrade to a fixed version: ABB Ac700F Firmware 9.2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-0426 or the next vulnerability affects your stack