CVE-2022-26080

🗓️ 16 Mar 2023 12:53:29Reported by ABBType

Vulnerability in ABB Pulsar Plus and Infinity DC Power Plant due to insufficient random values.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of software and hardware components in SCADA systems, such as ABB Pulsar Plus System Controller NE843_S, Infinity DC Power Plant H5692448 G104, Infinity DC Power Plant H5692448 G842, Infinity DC Power Plant H5692448 G224L, Infinity DC Power Plant H5692448 G630-4, Infinity DC Power Plant H5692448 G451C(2), Infinity DC Power Plant H5692448 G461(2), arises due to the use of insufficiently random values. This vulnerability allows unauthorized individuals to gain unauthorized access to session identifiers.	4 Apr 202300:00	–	bdu_fstec
Circl	CVE-2022-26080	26 Feb 202515:26	–	circl
CNNVD	Pulsar Plus System Controller 安全特征问题漏洞	16 Mar 202300:00	–	cnnvd
Cvelist	CVE-2022-26080 Easily guessable session ID's in NE843 Pulsar Plus Controller	16 Mar 202312:53	–	cvelist
EUVD	EUVD-2022-30648	3 Oct 202520:07	–	euvd
ICS	ABB Pulsar Plus Controller	31 Mar 202319:07	–	ics
NVD	CVE-2022-26080	16 Mar 202313:15	–	nvd
Prion	Design/Logic Flaw	16 Mar 202313:15	–	prion
Positive Technologies	PT-2023-2102 · Abb · Abb Infinity Dc Power Plant +1	16 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-26080	9 Jan 202609:11	–	redhatcve

NVD

Node

abb h5692448_g104_firmwareMatch-

AND

abb h5692448_g104Match-

Node

abb h5692448_g842_firmwareMatch-

AND

abb h5692448_g842Match-

Node

abb h5692448_g224l_firmwareMatch-

AND

abb h5692448_g224lMatch-

Node

abb h5692448_g630-4_firmwareMatch-

AND

abb h5692448_g630-4Match-

Node

abb h5692448_g451c(2)_firmwareMatch-

AND

abb h5692448_g451c(2)Match-

Node

abb h5692448_g461(2)_firmwareMatch-

AND

abb h5692448_g461(2)Match-

Node

abb ne843_s_firmwareMatch-

AND

abb ne843_sMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Pulsar Plus System Controller NE843_S ",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "comcode 150042936"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Infinity DC Power Plant",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

17 Jun 2026 04:34Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.14.3 - 6.3

EPSS0.00427

SSVC

CWE-330