CVE-2022-1596

published 2022-06-21

CVE-2022-1596: Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
abb	rex640_pcl1	unspecified – 1.0.7	—
abb	rex640_pcl1_firmware	<= 1.0.7	—
abb	rex640_pcl2	>= unspecified < 1.1.4	1.1.4
abb	rex640_pcl2_firmware	< 1.1.4	1.1.4
abb	rex640_pcl3	>= unspecified < 1.2.1	1.2.1
abb	rex640_pcl3_firmware	< 1.2.1	1.2.1

CWE-732