Information disclosure in Abb Platform Engineering Tools
CVE-2022-0010
Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.
EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Abb Platform Engineering Tools — versions 1.0:0
- Abb Platform_engineering_tools
- Abb Qcs 800xa — versions 1.0;0
- Abb Qcs_800xa
- Abb Qcs_800xa_firmware — versions 5.1.0
- Abb Qcs Ac450 — versions 1.0;0
- Abb Qcs_ac450
- Abb Qcs_ac450_firmware — versions 6.1.0
Weakness classification (CWE)
References
- cybersecurity@ch.abb.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-0010?
- CVE-2022-0010 is a high-severity vulnerability in Abb Platform Engineering Tools, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.8/10. Published 2023-05-22.
- How severe is CVE-2022-0010?
- High severity. CVSS v3 base score is 7.8 out of 10.