CVE-2023-5778CWE-130

CVE-2023-5778

High · published September 18, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.

This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/AU:Y/R:U/V:C/RE:H
EPSS
0.00288 · 20.3th percentile
Weakness
CWE-130 · Improper Handling of Length Parameter Inconsistency
Published
2026-09-18T18:17Z
References (1)
https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch · [email protected]
EPSS history
Timeline
  • 20 SEP 03:15Z
    EPSS moved — → 0%
    epss
  • 18 SEP 13:19Z
    Missing Length Check
    cvelistv5