CVE-2022-26080 Easily guessable session ID's in NE843 Pulsar Plus Controller

🗓️ 16 Mar 2023 12:53:29Reported by ABBType

CVE-2022-26080 session ID vulnerability in NE843 Pulsar Plus Controlle

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of software and hardware components in SCADA systems, such as ABB Pulsar Plus System Controller NE843_S, Infinity DC Power Plant H5692448 G104, Infinity DC Power Plant H5692448 G842, Infinity DC Power Plant H5692448 G224L, Infinity DC Power Plant H5692448 G630-4, Infinity DC Power Plant H5692448 G451C(2), Infinity DC Power Plant H5692448 G461(2), arises due to the use of insufficiently random values. This vulnerability allows unauthorized individuals to gain unauthorized access to session identifiers.	4 Apr 202300:00	–	bdu_fstec
Circl	CVE-2022-26080	26 Feb 202515:26	–	circl
CNNVD	Pulsar Plus System Controller 安全特征问题漏洞	16 Mar 202300:00	–	cnnvd
CVE	CVE-2022-26080	16 Mar 202312:53	–	cve
EUVD	EUVD-2022-30648	3 Oct 202520:07	–	euvd
ICS	ABB Pulsar Plus Controller	31 Mar 202319:07	–	ics
NVD	CVE-2022-26080	16 Mar 202313:15	–	nvd
Prion	Design/Logic Flaw	16 Mar 202313:15	–	prion
Positive Technologies	PT-2023-2102 · Abb · Abb Infinity Dc Power Plant +1	16 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-26080	9 Jan 202609:11	–	redhatcve

[
  {
    "defaultStatus": "unaffected",
    "product": "Pulsar Plus System Controller NE843_S ",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "comcode 150042936"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Infinity DC Power Plant",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

16 Mar 2023 12:53Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.3

EPSS0.0024

CWE-330