Information disclosure in Abb Platform Engineering Tools
CVE-2022-0010
Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (12.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 12.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Abb Platform Engineering Tools — versions 1.0:0
- Abb Platform Engineering Tools
- Abb Qcs 800xa — versions 1.0;0
- Abb Qcs 800xa
- Abb Qcs 800xa Firmware — versions 5.1.0
- Abb Qcs Ac450 — versions 1.0;0
- Abb Qcs Ac450
- Abb Qcs Ac450 Firmware — versions 6.1.0
Weakness classification (CWE)
References
- search.abb.com/library/Download.aspx (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-0010?
- CVE-2022-0010 is a high-severity vulnerability in Abb Platform Engineering Tools, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.8/10. Published 2023-05-22.
- How severe is CVE-2022-0010?
- High severity. CVSS v3 base score is 7.8 out of 10.