Skip to content
OpenAdvisories
High · 8.4 CVE-2021-22284 EUVD-2021-9430GHSA-xpp9-6v93-3xvq

SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability

Published Feb 4, 2022 · Updated Sep 16, 2024 · Assigned by ABB

Description

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.

Affected products

VendorProductAffectedFixed
ABB 800xA, Control Software for AC 800M OPC Server for AC 800M unspecified – ≤ 5.1.0-x, unspecified – ≤ 5.1.1-x, 6.0.0-1, 6.0.0-2, 6.0.0-3 —
ABB Control Builder Safe, version 1.x OPC Server for AC 800M 5.1.1-1 —
ABB Control Builder Safe, version 2.0 OPC Server for AC 800M 6.0.0-1 —
ABB Compact Product Suite - Control and I/O OPC Server for AC 800M unspecified – ≤ 5.1.0-x, unspecified – ≤ 5.1.1-x, unspecified – ≤ 6.0.0-x —

Advisories 1

References