Skip to content
OpenAdvisories
High 9AKK108470A8565 1 CVE

RMC-100 Vulnerability in the Web UI (REST Interface)

Published Mar 11, 2025 · Updated Mar 11, 2025

Vendor: ABB Product: RMC-100 Product: RMC-100 LITE

Summary

An update is available that resolves a vulnerability in the product versions listed as affected in this advisory.
An attacker who successfully exploited this vulnerability could cause the web UI to stop.

Vulnerabilities 1

  • High 7.5
    CVE-2022-24999 Public exploit EPSS 16%

    qs vulnerable to Prototype Pollution

    qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can pl…

    js-jquery nodejs-nodemon qs node-qs Debian Ubuntu Azure Linux npm

Revision history

  1. #1

    Initial

References