CVE-2022-29483

e-Design - Multiple vulnerabilities

State
Published
Severity
7.8 High
Published
May 31, 2022
Updated
Sep 16, 2024
Reserved
May 6, 2022

Read the record on cve.org

Description

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HABB

Weaknesses

  • CWE-276 Incorrect Default Permissions

Affected Products

ProductVersions
e-DesignABB
  • 1.12.2.0004 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.