Vulnerability · Published Jun 21, 2022 · Assigned by ABB
CVE-2022-1596ABB Relion REX640 Insufficient file access control
Medium 6.5
In plain English
A medium-severity incorrect permission assignment in REX640 PCL1 from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.7%top 48.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ABB | REX640 PCL1 | unspecified – through 1.0.7 |
| ABB | REX640 PCL2 | unspecified – before 1.1.4 |
| ABB | REX640 PCL3 | unspecified – before 1.2.1 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://search.abb.com/library/Download.aspx?DocumentID=2NGA001421 x_refsource_MISC