{"id":"CVE-2023-5778","title":"Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.\n\nThis issue affects Freelance Controll…","summary":"Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.\n\nThis issue affects Freelance Controll…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-130"],"vendor":"ABB","product":"Freelance Controller DCP","affected":["freelance_controller_dcp <= 2013","freelance_controller_dcp 2013 SP1","freelance_controller_dcp 2016","freelance_controller_dcp 2016 SP1","freelance_controller_dcp 2019","freelance_controller_dcp 2019 SP1","freelance_controller_ac700 <= 2013","freelance_controller_ac700 2013 SP1","freelance_controller_ac700 2016","freelance_controller_ac700 2016 SP1","freelance_controller_ac700 2019","freelance_controller_ac700 2019 SP1","freelance_controller_ac800 <= 2013","freelance_controller_ac800 2013 SP1","freelance_controller_ac800 2016","freelance_controller_ac800 2016 SP1","freelance_controller_ac800 2019","freelance_controller_ac800 2019 SP1","freelance_controller_ac900 <= 2013","freelance_controller_ac900 2013 SP1","freelance_controller_ac900 2016","freelance_controller_ac900 2016 SP1","freelance_controller_ac900 2019","freelance_controller_ac900 2019 SP1"],"published":"2026-09-18","updated":"2026-09-18","sourceUpdated":"2026-09-18T17:49:08.457","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-5778","references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch","label":"cybersecurity@ch.abb.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-18T14:12:56.535431Z"},"ingestedAt":"2026-09-18T13:41:41.667Z","epss":0.00288,"epssPercentile":0.21624,"slug":"CVE-2023-5778","body":"## Overview\n\nImproper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.\n\nThis issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}