Description
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | PCM600 | 2.7 – < unspecified, unspecified – ≤ 2.10 | unspecified |
| ABB | PCM600 Update Manager | 2.1, 2.1.0.4, 2.2, 2.2.0.1, 2.2.0.2, 2.2.0.23, 2.3.0.60, 2.4.20041.1, 2.4.20119.2 | — |
| Hitachi Energy | PCM600 | 2.7 – < unspecified, unspecified – ≤ 2.10 | unspecified |
| Hitachi Energy | PCM600 Update Manager | 2.1, 2.1.0.4, 2.2, 2.2.0.1, 2.2.0.2, 2.2.0.23, 2.3.0.60, 2.4.20041.1, 2.4.20119.2 | — |
Advisories 1
- ICSA-21-336-07 Hitachi Energy PCM600 Update Manager CISA ICS & IT advisories · Dec 2, 2021