---
id: CVE-2023-5778
title: >-
  Improper handling of length parameter inconsistency vulnerability in ABB
  Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance
  Controller AC800, and ABB Freelance Controller AC900.


  This issue affects Freelance Controll…
summary: >-
  Improper handling of length parameter inconsistency vulnerability in ABB
  Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance
  Controller AC800, and ABB Freelance Controller AC900.


  This issue affects Freelance Controll…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-130
vendor: ABB
product: Freelance Controller DCP
affected:
  - freelance_controller_dcp <= 2013
  - freelance_controller_dcp 2013 SP1
  - freelance_controller_dcp 2016
  - freelance_controller_dcp 2016 SP1
  - freelance_controller_dcp 2019
  - freelance_controller_dcp 2019 SP1
  - freelance_controller_ac700 <= 2013
  - freelance_controller_ac700 2013 SP1
  - freelance_controller_ac700 2016
  - freelance_controller_ac700 2016 SP1
  - freelance_controller_ac700 2019
  - freelance_controller_ac700 2019 SP1
  - freelance_controller_ac800 <= 2013
  - freelance_controller_ac800 2013 SP1
  - freelance_controller_ac800 2016
  - freelance_controller_ac800 2016 SP1
  - freelance_controller_ac800 2019
  - freelance_controller_ac800 2019 SP1
  - freelance_controller_ac900 <= 2013
  - freelance_controller_ac900 2013 SP1
  - freelance_controller_ac900 2016
  - freelance_controller_ac900 2016 SP1
  - freelance_controller_ac900 2019
  - freelance_controller_ac900 2019 SP1
published: '2026-09-18'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T17:49:08.457'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-5778'
references:
  - url: >-
      https://search.abb.com/library/Download.aspx?DocumentID=7PAA010706&LanguageCode=en&DocumentPartId=&Action=Launch
    label: cybersecurity@ch.abb.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-18T14:12:56.535431Z'
ingestedAt: '2026-09-18T13:41:41.667Z'
epss: 0.00288
epssPercentile: 0.21672
---

## Overview

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.

This issue affects Freelance Controller DCP: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC700: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC800: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1; Freelance Controller AC900: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, and 2019 SP1.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.