Log in Start free

Vulnerability · Published May 22, 2023 · Assigned by ABB

CVE-2022-0010QCS 800xA Vulnerability identified in system log files

High 7.8

In plain English

A high-severity sensitive data in logs in Platform Engineering Tools from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.

Affected products (as reported)

VendorProductVersions
ABB QCS 800xA 1.0;0 – through 6.1SP2
ABB QCS AC450 1.0;0 – through 5.1SP2
ABB Platform Engineering Tools 1.0:0 – through 2.3.0

Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References