CVE-2022-26080

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256117643.1223066510.1678942947-1879524908.1677751217	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:h:abb:h5692448_g104:-:*:*:*:*:*:*:*

cpe:2.3:o:abb:h5692448_g104_firmware:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:h:abb:h5692448_g842:-:*:*:*:*:*:*:*

cpe:2.3:o:abb:h5692448_g842_firmware:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:h:abb:h5692448_g224l:-:*:*:*:*:*:*:*

cpe:2.3:o:abb:h5692448_g224l_firmware:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:h:abb:h5692448_g630-4:-:*:*:*:*:*:*:*

cpe:2.3:o:abb:h5692448_g630-4_firmware:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:h:abb:h5692448_g451c\(2\):-:*:*:*:*:*:*:*

cpe:2.3:o:abb:h5692448_g451c\(2\)_firmware:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:h:abb:h5692448_g461\(2\):-:*:*:*:*:*:*:*

cpe:2.3:o:abb:h5692448_g461\(2\)_firmware:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:abb:ne843_s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:abb:ne843_s:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-03-16 13:15

Updated : 2023-11-07 03:44

NVD link : CVE-2022-26080

Mitre link : CVE-2022-26080

CVE.ORG link : CVE-2022-26080

JSON object : View

Products Affected

abb

h5692448_g842
h5692448_g461\(2\)
ne843_s
h5692448_g451c\(2\)
h5692448_g461\(2\)_firmware
ne843_s_firmware
h5692448_g630-4
h5692448_g224l_firmware
h5692448_g630-4_firmware
h5692448_g104
h5692448_g104_firmware
h5692448_g451c\(2\)_firmware
h5692448_g224l
h5692448_g842_firmware

CWE

CWE-330

Use of Insufficiently Random Values

{"id": "CVE-2022-26080", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "cybersecurity@ch.abb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 4.2, "exploitabilityScore": 2.1}]}, "published": "2023-03-16T13:15:08.863", "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256117643.1223066510.1678942947-1879524908.1677751217", "tags": ["Vendor Advisory"], "source": "cybersecurity@ch.abb.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-330"}]}, {"type": "Secondary", "source": "cybersecurity@ch.abb.com", "description": [{"lang": "en", "value": "CWE-330"}]}], "descriptions": [{"lang": "en", "value": "Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) \u2013 comcode 150047415.\n\n"}], "lastModified": "2023-11-07T03:44:55.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:h5692448_g104:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5EF5497C-0510-414A-B96B-24906B3F35AA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:h5692448_g104_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0F74600-CFD5-4DBC-A29A-EE5A6B002517"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:h5692448_g842:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "560166BE-B924-4232-B955-2CE861C4270D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:h5692448_g842_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D31272C5-13D7-43B5-AF45-4FE6307E234E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:h5692448_g224l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3C5529A7-CA5E-4F4F-A623-F2131C09C8C1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:h5692448_g224l_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78F66A6E-B51B-4D10-AEF9-65A80DAA1093"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:h5692448_g630-4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E743E2A0-0762-4BB7-92B5-2C3A552B4886"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:h5692448_g630-4_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AE1CD2D-8EA5-4BF7-AA2A-1668ABFF8BC7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:h5692448_g451c\\(2\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14D47479-1D2C-4490-A3F1-53ADEB30D3A0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:h5692448_g451c\\(2\\)_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0244B1ED-0B75-442C-B556-FA732FAF6105"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:h5692448_g461\\(2\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "057DB785-DFF7-4182-A517-8F870522B674"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:h5692448_g461\\(2\\)_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C77E5221-4728-49AA-8162-D4C633324B67"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:abb:ne843_s_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10227ED3-F013-4607-BBCB-3DD8FCD64704"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:abb:ne843_s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19231E30-C773-4C77-B268-ED752A3EFF06"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cybersecurity@ch.abb.com"}