7.8

CVE-2021-22277

AC 800M MMS - Denial of Service vulnerability in MMS communication

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Abb ≫ 800xa HwPlatform ac_800m Version >= 5.1.0-0 <= 5.1.0-3
Abb ≫ 800xa HwPlatform ac_800m Version >= 5.1.1-0 <= 5.1.1-4
Abb ≫ 800xa HwPlatform ac_800m Version >= 6.0.0-0 < 6.0.0-4
Abb ≫ 800xa HwPlatform ac_800m Version >= 6.1.0-0 < 6.1.1-2
Abb ≫ Base Software SwPlatform softcontrol Version >= 5.1.0-0 <= 5.1.0-3
Abb ≫ Base Software SwPlatform softcontrol Version >= 5.1.1-0 <= 5.1.1-4
Abb ≫ Base Software SwPlatform softcontrol Version >= 6.0.0-0 <= 6.0.0-3
Abb ≫ Base Software SwPlatform softcontrol Version >= 6.1.0-0 <= 6.1.1-1
Abb ≫ Compact Product Suite Version >= 5.1.0-0 <= 5.1.0-3
Abb ≫ Compact Product Suite Version >= 5.1.1-0 <= 5.1.1-4
Abb ≫ Compact Product Suite Version >= 6.0.0-0 <= 6.0.0-3
Abb ≫ Compact Product Suite Version >= 6.1.0-0 <= 6.1.1-1
Abb ≫ Control Builder Safe Version < 3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.93% 0.572
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
cybersecurity@ch.abb.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch
Vendor Advisory