6.5

CVE-2022-1596

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.

Data is provided by the National Vulnerability Database (NVD)
Abb ≫ Rex640 Pcl1 Firmware Version <= 1.0.7
   Abb ≫ Rex640 Pcl1 Version-
Abb ≫ Rex640 Pcl2 Firmware Version < 1.1.4
   Abb ≫ Rex640 Pcl2 Version-
Abb ≫ Rex640 Pcl3 Firmware Version < 1.2.1
   Abb ≫ Rex640 Pcl3 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.22% 0.445
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
cybersecurity@ch.abb.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.