PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-45234 TianoCore CVE debrief

CVE-2023-45234 is a high-severity buffer overflow vulnerability in EDK2's Network Package. An attacker can exploit this vulnerability to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity, and/or Availability. The vulnerability occurs when processing DNS Servers option from a DHCPv6 Advertise message. This issue affects multiple ABB products, including APC4100, APC910, C80, MPC3100, PPC1200, PPC900, APC2200, PPC2200, APC3100, and PPC3100. ABB has released patches for some affected products, while others have mitigation measures recommended.

Vendor
TianoCore
Product
APC4100
CVSS
HIGH 8.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-01-29
Original CVE updated
2026-05-21
Advisory published
2026-01-29
Advisory updated
2026-05-21

Who should care

Organizations using ABB products APC4100, APC910, C80, MPC3100, PPC1200, PPC900, APC2200, PPC2200, APC3100, and PPC3100 should prioritize patching or applying recommended mitigations. Industrial control systems operators, cybersecurity teams, and IT administrators responsible for these systems should be aware of the vulnerability and take immediate action to protect against potential exploitation.

Technical summary

The vulnerability is caused by a buffer overflow in EDK2's Network Package when processing DNS Servers option from a DHCPv6 Advertise message. An attacker can exploit this vulnerability to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity, and/or Availability. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 8.3, indicating a high severity. ABB has released patches for some affected products, while others have mitigation measures recommended, such as deactivating the vulnerable component or limiting accessibility.

Defensive priority

High priority should be given to patching or applying recommended mitigations for CVE-2023-45234. Immediate action is necessary to protect against potential exploitation and minimize the risk of unauthorized access and data breaches.

Recommended defensive actions

  • Apply patches for affected ABB products as soon as possible.
  • Deactivate the vulnerable component if not needed.
  • Limit accessibility to legitimate users and block illegitimate PXE traffic.
  • Monitor network traffic and implement firewall rules to block IPv6 network traffic on the control network firewall.
  • Review and update incident response plans to address potential exploitation.

Evidence notes

The CVE-2023-45234 vulnerability is documented in multiple sources, including CVE.org, NVD, and CISA's advisory. ABB has released patches for some affected products and recommends mitigation measures for others. The vulnerability affects multiple ABB products, and operators should prioritize patching or applying recommended mitigations.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-45234 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-45234

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-45234 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-45234

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-141-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://psirt.abb.com/csaf/2026/sa24p003.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.br-automation.com/fileadmin/SA24P003-bb9ea116.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.