CVE-2022-28702

e-Design - Multiple vulnerabilities

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

E-design

CVE-2022-28613

Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Abb Hitachienergy

Products

Rtu500 Firmware Rtu500 Rtu500 Firmware

CVE-2022-26057

Mint WorkBench Link Following Local Privilege Escalation Vulnerability

Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation on the product

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Mint Workbench

CVE-2022-1596

ABB Relion REX640 Insufficient file access control

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Rex640 Pcl1 Rex640 Pcl1 Firmware Rex640 Pcl2 and 3 more

CVE-2022-0947

Arctic Wireless Gateway Firewall vulnerability

A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Arc600a2323na Arc600a2323na Firmware Arc600a2324na and 45 more

CVE-2022-0902

ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC-100 (Standard), RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC) allows an attacker who successfully exploited this vulnerability could insert and run arbitrary code in an affected system node.

CVSS 3.1 · 8.1 High EPSS 16.9% KEV · Not listed

Vendors

Abb

Products

Rmc-100 Rmc-100-lite Rmc-100-lite Firmware and 11 more

CVE-2021-22288

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Abb

Products

Pni800 Pni800 Firmware Spiet800 and 1 more

CVE-2021-22286

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Abb

Products

Pni800 Pni800 Firmware Spiet800 and 1 more

CVE-2021-22285

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed

Vendors

Abb

Products

Pni800 Pni800 Firmware Spiet800 and 1 more

CVE-2021-22284

SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Opc Server For Ac 800m

CVE-2021-22279

OmniCore RobotWare Missing Authentication Vulnerability

A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Abb

Products

Omnicore C30 Omnicore C30 Firmware

CVE-2021-22278

Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool

A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Abb Hitachienergy

Products

Update Manager Pcm600

CVE-2021-22277

AC 800M MMS - Denial of Service vulnerability in MMS communication

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

800xa Base Software Compact Product Suite and 1 more

CVE-2021-22276

free@home System Access Point FW integrity check can be bypassed.

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

System Access Point 127v System Access Point 127v Firmware System Access Point 2.0 and 7 more

CVE-2021-22272

ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.

The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No firmware update is needed for customer products. If a user wants to understand if (s)he is affected, please read the advisory. This issue affects: ABB and Busch-Jaeger, ControlTouch

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Abb Busch-jaeger

Products

Mybuildings Mybusch-jaeger

CVE-2020-8489

ABB System 800xA Inter process communication vulnerability - 800xA Information Management

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management history services unavailable.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

800xa Information Management

CVE-2020-8488

ABB System 800xA Inter process communication vulnerability - 800xA Batch Management

Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

800xa Batch Management

CVE-2020-8487

ABB System 800xA Inter process communication vulnerability - System 800xA Base

Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

800xa Base System

CVE-2020-8486

ABB System 800xA Inter process communication vulnerability - 800xA RNRP

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

800xa Rnrp

CVE-2020-8485

ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

800xa