CVE-2022-3192

MEDIUM

ABB AC500 V2 PM5xx 2.0.0-2.8.6 - Client-Server Protocol Manipulation via Improper Input Validation

Title source: llm
STIX 2.1

Description

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.

Scores

CVSS v3 5.3
EPSS 0.0038
EPSS Percentile 59.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-754
Status published
Products (1)
abb/ac500_cpu_firmware 2.0.0 - 2.8.6
Published Mar 31, 2023
Tracked Since Feb 18, 2026