Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-1596 EUVD-2022-24885GHSA-xcx4-g33r-wmfq

ABB Relion REX640 Insufficient file access control

Published Jun 21, 2022 · Updated Sep 16, 2024 · Assigned by ABB

Description

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.

Affected products

VendorProductAffectedFixed
ABB REX640 PCL1 unspecified – ≤ 1.0.7 —
ABB REX640 PCL2 unspecified – < 1.1.4 1.1.4
ABB REX640 PCL3 unspecified – < 1.2.1 1.2.1

References