CVE-2022-3192

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-3192
Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://search.abb.com/library/Download.aspx?DocumentID=3ADR011162&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:abb:ac500_cpu_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:abb:pm5630-2eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm5650-2eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm5670-2eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm5675-2eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm571-eth-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm571-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm572:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm573-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm581-eth-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm581-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm582:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm582-arcnet:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm582-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm582-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm583-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm585-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm585-mc-kit:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm590-arcnet-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm590-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm590-eth-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm590-mc-kit:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm590-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm591-2eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm591-arcnet-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm591-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm591-eth-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm591-v14x:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm592-eth:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:pm595-4eth-f:2.0:*:*:*:*:*:*:*
History

13 Sep 2023, 04:15

Type Values Removed Values Added
Summary Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6. Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.
Information

Published : 2023-03-31 17:15

Updated : 2024-02-28 20:13

NVD link : CVE-2022-3192

Mitre link : CVE-2022-3192

CVE.ORG link : CVE-2022-3192

JSON object : View

Products Affected

abb

  • pm582
  • pm591-v14x
  • pm583-eth
  • pm581-v14x
  • pm582-eth
  • pm582-arcnet
  • pm591-eth-v14x
  • pm582-v14x
  • pm5650-2eth
  • pm581-eth-v14x
  • ac500_cpu_firmware
  • pm5675-2eth
  • pm572
  • pm590-mc-kit
  • pm573-eth
  • pm592-eth
  • pm595-4eth-f
  • pm571-eth-v14x
  • pm590-v14x
  • pm5670-2eth
  • pm591-eth
  • pm591-arcnet-v14x
  • pm5630-2eth
  • pm590-eth-v14x
  • pm590-eth
  • pm585-eth
  • pm571-v14x
  • pm585-mc-kit
  • pm590-arcnet-v14x
  • pm591-2eth
CWE
CWE-754

Improper Check for Unusual or Exceptional Conditions