CVE-2022-34838

Published Aug 24, 2022

Last updated 2 years ago

Overview

Description: Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.
Source: cybersecurity@ch.abb.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.4
Impact score: 5.8
Exploitability score: 2
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-522
cybersecurity@ch.abb.com: CWE-257

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:abb:zenon:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B77A9C22-F351-46D9-B777-5A16C48AF78F",
            "versionEndIncluding": "8.20"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References