5.3

CVE-2022-3192

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.

Data is provided by the National Vulnerability Database (NVD)
Abb ≫ Ac500 Cpu Firmware Version >= 2.0.0 < 2.8.6
   Abb ≫ Pm5630-2eth Version2.0
   Abb ≫ Pm5650-2eth Version2.0
   Abb ≫ Pm5670-2eth Version2.0
   Abb ≫ Pm5675-2eth Version2.0
   Abb ≫ Pm571-eth-v14x Version2.0
   Abb ≫ Pm571-v14x Version2.0
   Abb ≫ Pm572 Version2.0
   Abb ≫ Pm573-eth Version2.0
   Abb ≫ Pm581-eth-v14x Version2.0
   Abb ≫ Pm581-v14x Version2.0
   Abb ≫ Pm582 Version2.0
   Abb ≫ Pm582-arcnet Version2.0
   Abb ≫ Pm582-eth Version2.0
   Abb ≫ Pm582-v14x Version2.0
   Abb ≫ Pm583-eth Version2.0
   Abb ≫ Pm585-eth Version2.0
   Abb ≫ Pm585-mc-kit Version2.0
   Abb ≫ Pm590-arcnet-v14x Version2.0
   Abb ≫ Pm590-eth Version2.0
   Abb ≫ Pm590-eth-v14x Version2.0
   Abb ≫ Pm590-mc-kit Version2.0
   Abb ≫ Pm590-v14x Version2.0
   Abb ≫ Pm591-2eth Version2.0
   Abb ≫ Pm591-arcnet-v14x Version2.0
   Abb ≫ Pm591-eth Version2.0
   Abb ≫ Pm591-eth-v14x Version2.0
   Abb ≫ Pm591-v14x Version2.0
   Abb ≫ Pm592-eth Version2.0
   Abb ≫ Pm595-4eth-f Version2.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.153
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
cybersecurity@ch.abb.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.