CVE-2022-1607 Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller

🗓️ 24 Feb 2023 04:49:49Reported by ABBType

Cross Site Scripting and CSRF in NE843 Pulsar Plus Controlle

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the software and hardware components of SCADA systems, such as the ABB Pulsar Plus System Controller NE843_S, Infinity DC Power Plant H5692448 G104, Infinity DC Power Plant H5692448 G842, Infinity DC Power Plant H5692448 G224L, Infinity DC Power Plant H5692448 G630-4, Infinity DC Power Plant H5692448 G451C(2), Infinity DC Power Plant H5692448 G461(2), arises due to insufficient validation of input data. This vulnerability allows attackers to execute CSRF attacks.	4 Jul 202300:00	–	bdu_fstec
Circl	CVE-2022-1607	5 May 202321:08	–	circl
CNNVD	Pulsar Plus System Controller 跨站请求伪造漏洞	24 Feb 202300:00	–	cnnvd
CVE	CVE-2022-1607	24 Feb 202304:49	–	cve
EUVD	EUVD-2022-24896	3 Oct 202520:07	–	euvd
ICS	ABB Pulsar Plus Controller	31 Mar 202319:07	–	ics
NVD	CVE-2022-1607	24 Feb 202305:15	–	nvd
OSV	CVE-2022-1607	24 Feb 202305:15	–	osv
Prion	Cross site request forgery (csrf)	24 Feb 202305:15	–	prion
Positive Technologies	PT-2023-3375 · Abb · Abb Infinity Dc Power Plant +1	24 Feb 202300:00	–	ptsecurity

[
  {
    "defaultStatus": "unaffected",
    "product": "Pulsar Plus System Controller NE843_S ",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "comcode 150042936"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Infinity DC Power Plant",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

24 Feb 2023 04:50Current

8.9High risk

Vulners AI Score8.9

CVSS 3.14.6

EPSS0.00215

CWE-352