Skip to content
OpenAdvisories
Medium ICSA-23-082-05 2 CVEs

ABB Pulsar Plus Controller

Published Mar 31, 2023 · Updated Mar 31, 2023

Vendor: ABB Product: Infinity DC Power Plant Product: Pulsar Plus System Controller

Summary

Successful exploitation of these vulnerabilities could allow an attacker to take control of the product or execute arbitrary code.

Vulnerabilities 2

  • Medium 6.3
    CVE-2022-26080

    Easily guessable session ID's in NE843 Pulsar Plus Controller

    Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 …

    ABB Pulsar Plus System Controller NE843_S Infinity DC Power Plant ICS / OT
  • Medium 4.6
    CVE-2022-1607

    Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller

    Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: …

    ABB Infinity DC Power Plant Pulsar Plus System Controller NE843_S ICS / OT

Revision history

  1. #1

    CSAF Creation Date

References