7.8

CVE-2021-22277

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.

Data is provided by the National Vulnerability Database (NVD)
Abb ≫ 800xa HwPlatformac_800m Version >= 5.1.0-0 <= 5.1.0-3
Abb ≫ 800xa HwPlatformac_800m Version >= 5.1.1-0 <= 5.1.1-4
Abb ≫ 800xa HwPlatformac_800m Version >= 6.0.0-0 < 6.0.0-4
Abb ≫ 800xa HwPlatformac_800m Version >= 6.1.0-0 < 6.1.1-2
Abb ≫ Base Software SwPlatformsoftcontrol Version >= 5.1.0-0 <= 5.1.0-3
Abb ≫ Base Software SwPlatformsoftcontrol Version >= 5.1.1-0 <= 5.1.1-4
Abb ≫ Base Software SwPlatformsoftcontrol Version >= 6.0.0-0 <= 6.0.0-3
Abb ≫ Base Software SwPlatformsoftcontrol Version >= 6.1.0-0 <= 6.1.1-1
Abb ≫ Compact Product Suite Version >= 5.1.0-0 <= 5.1.0-3
Abb ≫ Compact Product Suite Version >= 5.1.1-0 <= 5.1.1-4
Abb ≫ Compact Product Suite Version >= 6.0.0-0 <= 6.0.0-3
Abb ≫ Compact Product Suite Version >= 6.1.0-0 <= 6.1.1-1
Abb ≫ Control Builder Safe Version < 3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.55% 0.667
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
cybersecurity@ch.abb.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.