CMS-770 and Busch-EnergyMonitor Cybersecurity Advisory

This document is a cybersecurity advisory from ABB regarding a vulnerability (ABB ID: ABBVU-EPBP-R-5673) affecting the CMS-770 Control Unit and Busch-EnergyMonitor (software version 1.7.1 and earlier). The vulnerability allows an attacker to bypass user authentication and read the configuration file, potentially leading to full device takeover, with a CVSS v3 base score of 8.8; ABB has updated the product manuals with mitigation instructions instead of releasing a firmware update.