Automation Runtime and mapp View Use of insecure algorithm for self-signed certificates

An attacker could impersonate critical automation services on your ABB systems, potentially redirecting or intercepting communications between controllers and field devices, or forcing devices to trust malicious certificates.

Water utilities and electric utilities operating ABB Automation Runtime or mapp View software should prioritize this update if these products are used to generate self-signed certificates on production machines. This is particularly important for facilities that rely on certificate-based authentication between automation controllers, HMIs, and field devices.

An attacker with network access to the affected Automation Runtime or mapp View instance could generate or manipulate self-signed certificates using weak cryptographic algorithms. The attacker would then present these certificates to other systems on the network, which would accept them as legitimate due to the weak cryptography, allowing the attacker to impersonate a trusted service.