ABB OPC Server for AC 800M

Summary

Vulnerabilities 1

• High 8.4
  CVE-2021-22284

  SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability

  Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.

  ABB 800xA, Control Software for AC 800M OPC Server for AC 800M Control Builder Safe, version 2.0 OPC Server for AC 800M Control Builder Safe, version 1.x OPC Server for AC 800M ICS / OT
  Feb 4, 2022

Revision history

1. 2022-03-15 #1

   ICSA-22-074-01 ABB OPC Server for AC 800M

References

• ICS Advisory ICSA-22-074-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-22-074-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B