CVE-2021-22284

HIGH

ABB Opc Server For AC 800m < 6.0.0-4 - Incorrect Permission Assignment

Title source: rule

Description

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://search.abb.com/library/Download.aspx?DocumentID=7PAA000908&LanguageCode=en&DocumentPartId=&Action=Launch

Scores

CVSS v3 8.4

EPSS 0.0048

EPSS Percentile 65.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Details

CWE

CWE-732

Status published

Products (1)

abb/opc_server_for_ac_800m 5.1.0-0 - 6.0.0-4

Published Feb 04, 2022

Tracked Since Feb 18, 2026