ABBCVELIST:CVE-2022-26080CVE-2022-26080 Easily guessable session ID's in NE843 Pulsar Plus Controller
6.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
0.001 Low
EPSS
Percentile
21.2%
Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Pulsar Plus System Controller NE843_S ",
"vendor": "ABB",
"versions": [
{
"status": "affected",
"version": "comcode 150042936"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Infinity DC Power Plant",
"vendor": "ABB",
"versions": [
{
"status": "affected",
"version": "H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415"
}
]
}
]Related
6.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
0.001 Low
EPSS
Percentile
21.2%