CVE-2022-1596: Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an…

PriorityP338medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

0.62%

45.6th percentile

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
abb	rex640_pcl1	unspecified – 1.0.7	—
abb	rex640_pcl1_firmware	<= 1.0.7	—
abb	rex640_pcl2	>= unspecified < 1.1.4	1.1.4
abb	rex640_pcl2_firmware	< 1.1.4	1.1.4
abb	rex640_pcl3	>= unspecified < 1.2.1	1.2.1
abb	rex640_pcl3_firmware	< 1.2.1	1.2.1

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.