Search criteria

2 vulnerabilities found for Compact Product Suite - Control and I/O by ABB

CVE-2021-22277 (GCVE-0-2021-22277)

Vulnerability from cvelistv5 – Published: 2022-04-01 22:17 – Updated: 2024-09-17 01:41
VLAI?
Summary
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.
CWE
  • CWE-20 - Improper Input Validation
Assigner
ABB
References
Impacted products
Vendor Product Version
ABB 800xA, Control Software for AC 800M Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
    ABB Control Builder Safe Affected: 1.x
Affected: 2.0
Affected: 3.0
Create a notification for this product.
    ABB Compact Product Suite - Control and I/O Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
    ABB ABB Base Software for SoftControl Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
Credits
ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T18:37:18.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "800xA, Control Software for AC 800M",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Control Builder Safe",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "1.x"
            },
            {
              "status": "affected",
              "version": "2.0"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "product": "Compact Product Suite - Control and I/O",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "ABB Base Software for SoftControl",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers."
        }
      ],
      "datePublic": "2022-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-01T22:17:43",
        "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
        "shortName": "ABB"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "AC 800M MMS - Denial of Service vulnerability in MMS communication",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cybersecurity@ch.abb.com",
          "DATE_PUBLIC": "2022-02-17T10:33:00.000Z",
          "ID": "CVE-2021-22277",
          "STATE": "PUBLIC",
          "TITLE": "AC 800M MMS - Denial of Service vulnerability in MMS communication"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "800xA, Control Software for AC 800M",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Control Builder Safe",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.x"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "2.0"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "3.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Compact Product Suite - Control and I/O",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "ABB Base Software for SoftControl",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ABB"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch",
              "refsource": "MISC",
              "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
    "assignerShortName": "ABB",
    "cveId": "CVE-2021-22277",
    "datePublished": "2022-04-01T22:17:43.044264Z",
    "dateReserved": "2021-01-05T00:00:00",
    "dateUpdated": "2024-09-17T01:41:41.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-22277 (GCVE-0-2021-22277)

Vulnerability from nvd – Published: 2022-04-01 22:17 – Updated: 2024-09-17 01:41
VLAI?
Summary
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.
CWE
  • CWE-20 - Improper Input Validation
Assigner
ABB
References
Impacted products
Vendor Product Version
ABB 800xA, Control Software for AC 800M Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
    ABB Control Builder Safe Affected: 1.x
Affected: 2.0
Affected: 3.0
Create a notification for this product.
    ABB Compact Product Suite - Control and I/O Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
    ABB ABB Base Software for SoftControl Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
Credits
ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T18:37:18.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "800xA, Control Software for AC 800M",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Control Builder Safe",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "1.x"
            },
            {
              "status": "affected",
              "version": "2.0"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "product": "Compact Product Suite - Control and I/O",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "ABB Base Software for SoftControl",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers."
        }
      ],
      "datePublic": "2022-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-01T22:17:43",
        "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
        "shortName": "ABB"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "AC 800M MMS - Denial of Service vulnerability in MMS communication",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cybersecurity@ch.abb.com",
          "DATE_PUBLIC": "2022-02-17T10:33:00.000Z",
          "ID": "CVE-2021-22277",
          "STATE": "PUBLIC",
          "TITLE": "AC 800M MMS - Denial of Service vulnerability in MMS communication"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "800xA, Control Software for AC 800M",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Control Builder Safe",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.x"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "2.0"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "3.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Compact Product Suite - Control and I/O",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "ABB Base Software for SoftControl",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ABB"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch",
              "refsource": "MISC",
              "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
    "assignerShortName": "ABB",
    "cveId": "CVE-2021-22277",
    "datePublished": "2022-04-01T22:17:43.044264Z",
    "dateReserved": "2021-01-05T00:00:00",
    "dateUpdated": "2024-09-17T01:41:41.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}