Lucene search

ABBCVE-2021-22286

HistoryFeb 04, 2022 - 11:15 p.m.

CVE-2021-22286

2022-02-0423:15:10

CWE-20

ABB

web.nvd.nist.gov

input validation

vulnerability

abb

spiet800

pni800

denial of service

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

39.5%

JSON

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.

Affected configurations

Nvd

Node

abbpni800_firmwareRange≤a_b

AND

abbpni800Match-

Node

abbspiet800_firmwareRange≤a_b

AND

abbspiet800Match-

VendorProductVersionCPE
abbpni800_firmware*cpe:2.3:o:abb:pni800_firmware:*:*:*:*:*:*:*:*
abbpni800-cpe:2.3:h:abb:pni800:-:*:*:*:*:*:*:*
abbspiet800_firmware*cpe:2.3:o:abb:spiet800_firmware:*:*:*:*:*:*:*:*
abbspiet800-cpe:2.3:h:abb:spiet800:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
abb	pni800_firmware	*	cpe:2.3:o:abb:pni800_firmware::::::::
abb	pni800	-	cpe:2.3:h:abb:pni800:-:::::::*
abb	spiet800_firmware	*	cpe:2.3:o:abb:spiet800_firmware::::::::
abb	spiet800	-	cpe:2.3:h:abb:spiet800:-:::::::*

CNA Affected

[
  {
    "product": "SPIET800",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "A_B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PNI800",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "A_B",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

search.abb.com/library/Download.aspx?DocumentID=7PAA001353&LanguageCode=en&DocumentPartId=&Action=Launch

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

39.5%

JSON

Related for CVE-2021-22286