CVE-2021-22284

SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability

State: Published
Severity: 8.4 High
Published: Feb 4, 2022
Updated: Sep 16, 2024
Reserved: Jan 5, 2021

Description

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H	ABB

Weaknesses

CWE-732 Incorrect Permission Assignment for Critical Resource

Affected Products

Product	Versions
800xA, Control Software for AC 800M OPC Server for AC 800MABB	5.1.0-x and earlierAffected 5.1.1-x and earlierAffected 6.0.0-1Affected 6.0.0-2Affected 6.0.0-3Affected
Control Builder Safe, version 1.x OPC Server for AC 800MABB	5.1.1-1Affected
Control Builder Safe, version 2.0 OPC Server for AC 800MABB	6.0.0-1Affected
Compact Product Suite - Control and I/O OPC Server for AC 800MABB	5.1.0-x and earlierAffected 5.1.1-x and earlierAffected 6.0.0-x and earlierAffected

References

https://search.abb.com/library/Download.aspx?DocumentID=7PAA000908&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.