CVE-2021-22277 (GCVE-0-2021-22277)

Vulnerability from cvelistv5 – Published: 2022-04-01 22:17 – Updated: 2024-09-17 01:41
VLAI?
Summary
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.
Severity ?
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-20 - Improper Input Validation
Assigner
ABB
References
Impacted products
Vendor Product Version
ABB 800xA, Control Software for AC 800M Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
    ABB Control Builder Safe Affected: 1.x
Affected: 2.0
Affected: 3.0
Create a notification for this product.
    ABB Compact Product Suite - Control and I/O Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
    ABB ABB Base Software for SoftControl Affected: 5.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.0-3 (custom)
Affected: 5.1.1-0 , < unspecified (custom)
Affected: unspecified , ≤ 5.1.1-4 (custom)
Affected: 6.0.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.0.0-3 (custom)
Affected: 6.1.0-0 , < unspecified (custom)
Affected: unspecified , ≤ 6.1.1-1 (custom)
Create a notification for this product.
Credits
ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T18:37:18.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "800xA, Control Software for AC 800M",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Control Builder Safe",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "1.x"
            },
            {
              "status": "affected",
              "version": "2.0"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "product": "Compact Product Suite - Control and I/O",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "ABB Base Software for SoftControl",
          "vendor": "ABB",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "5.1.1-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.1-4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.0.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.0.0-3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "6.1.0-0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1-1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers."
        }
      ],
      "datePublic": "2022-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-01T22:17:43",
        "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
        "shortName": "ABB"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "AC 800M MMS - Denial of Service vulnerability in MMS communication",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cybersecurity@ch.abb.com",
          "DATE_PUBLIC": "2022-02-17T10:33:00.000Z",
          "ID": "CVE-2021-22277",
          "STATE": "PUBLIC",
          "TITLE": "AC 800M MMS - Denial of Service vulnerability in MMS communication"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "800xA, Control Software for AC 800M",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Control Builder Safe",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.x"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "2.0"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "3.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Compact Product Suite - Control and I/O",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "ABB Base Software for SoftControl",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "5.1.1-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "5.1.1-4"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.0.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.0.0-3"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "6.1.0-0"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_value": "6.1.1-1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ABB"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "ABB thanks the Industrial Control Security Laboratory of Qi An Xin Technology Group Inc. in China for helping to identify the vulnerabilities and protecting our customers."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch",
              "refsource": "MISC",
              "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
    "assignerShortName": "ABB",
    "cveId": "CVE-2021-22277",
    "datePublished": "2022-04-01T22:17:43.044264Z",
    "dateReserved": "2021-01-05T00:00:00",
    "dateUpdated": "2024-09-17T01:41:41.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\", \"versionStartIncluding\": \"5.1.0-0\", \"versionEndIncluding\": \"5.1.0-3\", \"matchCriteriaId\": \"34405B51-759E-40EF-B267-D2C543516E88\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\", \"versionStartIncluding\": \"5.1.1-0\", \"versionEndIncluding\": \"5.1.1-4\", \"matchCriteriaId\": \"E60385EF-68B6-457C-8866-4FF873E479DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\", \"versionStartIncluding\": \"6.0.0-0\", \"versionEndExcluding\": \"6.0.0-4\", \"matchCriteriaId\": \"FC945CEA-6412-489A-B4FB-603F9155171F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\", \"versionStartIncluding\": \"6.1.0-0\", \"versionEndExcluding\": \"6.1.1-2\", \"matchCriteriaId\": \"A586F45F-D257-48B9-B51E-2595C4244058\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\", \"versionStartIncluding\": \"5.1.0-0\", \"versionEndIncluding\": \"5.1.0-3\", \"matchCriteriaId\": \"978185F8-0B75-4148-A71D-CD0BD27DC33D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\", \"versionStartIncluding\": \"5.1.1-0\", \"versionEndIncluding\": \"5.1.1-4\", \"matchCriteriaId\": \"7742BF26-14B5-4357-AAB2-9CA978AE40FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\", \"versionStartIncluding\": \"6.0.0-0\", \"versionEndIncluding\": \"6.0.0-3\", \"matchCriteriaId\": \"5A9496BF-861D-406B-9C20-1EB06B29FFBF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\", \"versionStartIncluding\": \"6.1.0-0\", \"versionEndIncluding\": \"6.1.1-1\", \"matchCriteriaId\": \"9E030201-1CA1-4213-991B-8D232A479F71\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.1.0-0\", \"versionEndIncluding\": \"5.1.0-3\", \"matchCriteriaId\": \"A4A9DB73-0A59-4E23-86A8-0845CE70D165\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.1.1-0\", \"versionEndIncluding\": \"5.1.1-4\", \"matchCriteriaId\": \"79270ECE-68F0-4A2E-B5E3-15B40793D772\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.0.0-0\", \"versionEndIncluding\": \"6.0.0-3\", \"matchCriteriaId\": \"47F70CD9-38FB-4D91-A0E6-4DBAE8E90FA1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.1.0-0\", \"versionEndIncluding\": \"6.1.1-1\", \"matchCriteriaId\": \"FFEBFB13-EFCB-4026-86D9-78D3AA8F18BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:abb:control_builder_safe:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.0\", \"matchCriteriaId\": \"8378E7C7-72FA-45C5-847C-63CCC0527C72\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad de comprobaci\\u00f3n de entrada inapropiada en ABB 800xA, Software de control para AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl permite a un atacante causar la denegaci\\u00f3n de servicio\"}]",
      "id": "CVE-2021-22277",
      "lastModified": "2024-11-21T05:49:49.850",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"cybersecurity@ch.abb.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:C\", \"baseScore\": 7.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2022-04-01T23:15:08.833",
      "references": "[{\"url\": \"https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\", \"source\": \"cybersecurity@ch.abb.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "cybersecurity@ch.abb.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"cybersecurity@ch.abb.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-22277\",\"sourceIdentifier\":\"cybersecurity@ch.abb.com\",\"published\":\"2022-04-01T23:15:08.833\",\"lastModified\":\"2024-11-21T05:49:49.850\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de comprobaci\u00f3n de entrada inapropiada en ABB 800xA, Software de control para AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl permite a un atacante causar la denegaci\u00f3n de servicio\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cybersecurity@ch.abb.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"cybersecurity@ch.abb.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\",\"versionStartIncluding\":\"5.1.0-0\",\"versionEndIncluding\":\"5.1.0-3\",\"matchCriteriaId\":\"34405B51-759E-40EF-B267-D2C543516E88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\",\"versionStartIncluding\":\"5.1.1-0\",\"versionEndIncluding\":\"5.1.1-4\",\"matchCriteriaId\":\"E60385EF-68B6-457C-8866-4FF873E479DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\",\"versionStartIncluding\":\"6.0.0-0\",\"versionEndExcluding\":\"6.0.0-4\",\"matchCriteriaId\":\"FC945CEA-6412-489A-B4FB-603F9155171F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:800xa:*:*:*:*:*:*:ac_800m:*\",\"versionStartIncluding\":\"6.1.0-0\",\"versionEndExcluding\":\"6.1.1-2\",\"matchCriteriaId\":\"A586F45F-D257-48B9-B51E-2595C4244058\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\",\"versionStartIncluding\":\"5.1.0-0\",\"versionEndIncluding\":\"5.1.0-3\",\"matchCriteriaId\":\"978185F8-0B75-4148-A71D-CD0BD27DC33D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\",\"versionStartIncluding\":\"5.1.1-0\",\"versionEndIncluding\":\"5.1.1-4\",\"matchCriteriaId\":\"7742BF26-14B5-4357-AAB2-9CA978AE40FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\",\"versionStartIncluding\":\"6.0.0-0\",\"versionEndIncluding\":\"6.0.0-3\",\"matchCriteriaId\":\"5A9496BF-861D-406B-9C20-1EB06B29FFBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*\",\"versionStartIncluding\":\"6.1.0-0\",\"versionEndIncluding\":\"6.1.1-1\",\"matchCriteriaId\":\"9E030201-1CA1-4213-991B-8D232A479F71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.1.0-0\",\"versionEndIncluding\":\"5.1.0-3\",\"matchCriteriaId\":\"A4A9DB73-0A59-4E23-86A8-0845CE70D165\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.1.1-0\",\"versionEndIncluding\":\"5.1.1-4\",\"matchCriteriaId\":\"79270ECE-68F0-4A2E-B5E3-15B40793D772\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.0-0\",\"versionEndIncluding\":\"6.0.0-3\",\"matchCriteriaId\":\"47F70CD9-38FB-4D91-A0E6-4DBAE8E90FA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:compact_product_suite:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.0-0\",\"versionEndIncluding\":\"6.1.1-1\",\"matchCriteriaId\":\"FFEBFB13-EFCB-4026-86D9-78D3AA8F18BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:abb:control_builder_safe:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.0\",\"matchCriteriaId\":\"8378E7C7-72FA-45C5-847C-63CCC0527C72\"}]}]}],\"references\":[{\"url\":\"https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\",\"source\":\"cybersecurity@ch.abb.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.