vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-5778

Missing Length Check

HIGH
7.5
CVSS Score
Published: September 18, 2026 at 01:19 PM UTC
Updated: September 18, 2026 at 05:59 PM UTC
4 products affected across 1 vendorAC900FAC700FFreelance Dcp

Using Freelance Controller DCP by ABB?

Get instant alerts when new vulnerabilities affect Freelance Controller DCP - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.5%
SSVC
No known exploit

Description

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

AC700F· ABB
60%
v ≤ 20132013 SP120162016 SP120192019 SP1
Vendor states this is fixed in 2019 SP1 FP1 (unaffected)
Vendor states this is fixed in 2024 (unaffected)
AC800F· ABB
60%
v ≤ 20132013 SP120162016 SP120192019 SP1
Vendor states this is fixed in 2019 SP1 FP1 (unaffected)
Vendor states this is fixed in 2024 (unaffected)
AC900F· ABB
60%
v ≤ 20132013 SP120162016 SP120192019 SP1
Vendor states this is fixed in 2019 SP1 FP1 (unaffected)
Vendor states this is fixed in 2024 (unaffected)
Freelance Dcp· ABB
60%
v ≤ 20132013 SP120162016 SP120192019 SP1
Vendor states this is fixed in 2019 SP1 FP1 (unaffected)
Vendor states this is fixed in 2024 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

Source: cverecord
https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHABB
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-130

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card