Lucene search

ABBCVELIST:CVE-2022-1596

HistoryJun 21, 2022 - 2:23 p.m.

CVE-2022-1596 ABB Relion REX640 Insufficient file access control

2022-06-2114:23:42

CWE-732

ABB

www.cve.org

cve-2022-1596

abb relion rex640

file access control

permission assignment

critical resource

authenticated attacker

user database

affected system node

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

28.4%

JSON

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.

CNA Affected

[
  {
    "product": "REX640 PCL1",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "1.0.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "REX640 PCL2",
    "vendor": "ABB",
    "versions": [
      {
        "lessThan": "1.1.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "REX640 PCL3",
    "vendor": "ABB",
    "versions": [
      {
        "lessThan": "1.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

search.abb.com/library/Download.aspx?DocumentID=2NGA001421

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

28.4%

JSON

Related for CVELIST:CVE-2022-1596