CVE-2022-0010

🗓️ 22 May 2023 07:22:51Reported by ABBType

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker could obtain system user account password

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-0010	22 May 202312:25	–	circl
CNNVD	ABB多款产品日志信息泄露漏洞	22 May 202300:00	–	cnnvd
Cvelist	CVE-2022-0010 QCS 800xA Vulnerability identified in system log files	22 May 202307:22	–	cvelist
EUVD	EUVD-2022-15231	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0010	22 May 202308:15	–	nvd
Prion	Design/Logic Flaw	22 May 202308:15	–	prion
Positive Technologies	PT-2023-9780 · Abb · Abb Platform Engineering Tools +2	22 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-0010	5 Feb 202519:29	–	redhatcve
Tenable Nessus	ABB Platform Engineering Tools Insertion of Sensitive Information into Log File (CVE-2022-0010)	5 Jun 202300:00	–	nessus
Vulnrichment	CVE-2022-0010 QCS 800xA Vulnerability identified in system log files	22 May 202307:22	–	vulnrichment

NVD

Node

abb platform_engineering_toolsRange1.0.0–2.3.0

Node

abb qcs_800xa_firmwareRange1.0.0–5.1.0

abb qcs_800xa_firmwareMatch5.1.0sp2

AND

abb qcs_800xaMatch-

Node

abb qcs_ac450_firmwareRange1.0.0–6.1.0

abb qcs_ac450_firmwareMatch6.1.0sp2

AND

abb qcs_ac450Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "QCS 800xA",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "6.1SP2",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QCS AC450",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "5.1SP2",
        "status": "affected",
        "version": "1.0;0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Platform Engineering Tools",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "2.3.0",
        "status": "affected",
        "version": "1.0:0",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

21 Nov 2024 06:37Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5 - 7.8

EPSS0.00099

SSVC

CWE-532