CVE-2022-0010: abb platform engineering tools +2 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2022-0010

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan Insertion of Sensitive Information into Log File pada abb platform engineering tools, abb qcs 800xa firmware +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.

Rincian

Terbit di NVD: 22 Mei 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-532: Insertion of Sensitive Information into Log File
EPSS (30 hari): 0,23% peluang dieksploitasi; lebih tinggi dari 12,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
abb	platform engineering tools	Versi 1.0.0 hingga 2.3.0
abb	qcs 800xa firmware	Versi 1.0.0 hingga 5.1.0
abb	qcs 800xa firmware	Versi 5.1.0 sp2
abb	qcs ac450 firmware	Versi 1.0.0 hingga 6.1.0
abb	qcs ac450 firmware	Versi 6.1.0 sp2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://search.abb.com/library/Download.aspx?DocumentID=3BUS221709&LanguageCode=en&DocumentPartId=&Action=Laun... advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.