What’s Vulnerable › Vulnerabilities

CVE-2023-5778: Missing Length Check

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-09-18
• Weakness: CWE-130

Description

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

Affected products

• ABB Freelance Controller AC700: through 2013; 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1
• ABB Freelance Controller AC800: through 2013; 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1
• ABB Freelance Controller AC900: through 2013; 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1
• ABB Freelance Controller DCP: through 2013; 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1

References

• https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2023-5778 or the next vulnerability affects your stack