# CVE-2023-45231: ABB B&R PCs multiple vulnerabilities in UEFI PXE stack

Source: https://junglewise.ai/threats/cve-2023-45229-abb-b-r-pcs-multiple-vulnerabilities-in-uefi-pxe-stack  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-21. Updated: 2026-05-21  
License: CC BY 4.0 with a link back

CVE-2023-45231 · Severity: high · CVSS 8.3 · Published 2026-05-21

ABB B&R industrial PCs are affected by multiple vulnerabilities in their UEFI firmware's network boot component. These PCs are used in critical infrastructure and energy sectors to control and monitor industrial processes. A successful exploit could allow an attacker on the local network to take control of the device, cause it to crash, or intercept sensitive data during the boot process.

Vendors: [ABB](https://junglewise.ai/threats/vendors/abb).

## Quick answers

**Is CVE-2023-45231 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2023-45231 being exploited in the wild.

**How severe is CVE-2023-45231?** High severity, with a CVSS score of 8.3, published 21 May 2026.

**Which products and versions are affected?** ABB APC2200 <1.35; ABB APC3100 <1.45; ABB APC4100 <1.09; ABB APC910 <=1.25; and 6 more.

**Is there a fix for CVE-2023-45231?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2023-45231 attacked?** It is attacked from the adjacent network, in an operating system.

**Am I affected by CVE-2023-45231?** Check whether you run ABB APC2200, ABB APC3100, ABB APC4100 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerabilities (collectively known as PixieFail) reside in the EDK2 Network Package used within the UEFI firmware of various ABB B&R industrial PCs. The flaws include out-of-bounds reads, buffer overflows, and infinite loops within the Preboot eXecution Environment (PXE) stack, specifically affecting DHCPv6 and IPv6 Neighbor Discovery protocols. An attacker on the same local network segment can exploit these by sending specially crafted network packets during the PXE boot process. This can result in remote code execution, denial-of-service, or DNS cache poisoning. Patches are available for most models, and users are advised to disable PXE boot in UEFI settings if it is not required.

## Affected products

- ABB APC4100 <1.09
- ABB APC910 <=1.25
- ABB C80 <1.14
- ABB MPC3100 <1.24
- ABB PPC1200 <1.14
- ABB PPC900 <2.16
- ABB APC2200 <1.35
- ABB PPC2200 <1.35
- ABB APC3100 <1.45
- ABB PPC3100 <1.45

## Identifiers

- CVE-2023-45231
- CVE-2023-45233
- CVE-2023-45235
- CVE-2023-45230
- CVE-2023-45237
- CVE-2023-45234
- CVE-2023-45232
- CVE-2023-45236
- CVE-2023-45229

## Timeline

- 2026-05-21: advisory: CISA published advisory ICSA-26-141-02

## References

- [https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-02](https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-02)