CVE-2021-22278
28.10.2021, 13:15
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| abb | update_manager | 2.1 |
| abb | update_manager | 2.1.0.4 |
| abb | update_manager | 2.2 |
| abb | update_manager | 2.2.0.1 |
| abb | update_manager | 2.2.0.2 |
| abb | update_manager | 2.2.0.23 |
| abb | update_manager | 2.3.0.60 |
| abb | update_manager | 2.4.20041.1 |
| abb | update_manager | 2.4.20119.2 |
| abb | update_manager | 2.7 ≤ 𝑥 ≤ 2.10 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| abb | pcm600 | 2.7 | CNA |
| abb | pcm600 | 𝑥 ≤ 2.10 | CNA |
| abb | pcm600 | 2.1 | CNA |
| abb | pcm600 | 2.1.0.4 | CNA |
| abb | pcm600 | 2.2 | CNA |
| abb | pcm600 | 2.2.0.1 | CNA |
| abb | pcm600 | 2.2.0.2 | CNA |
| abb | pcm600 | 2.2.0.23 | CNA |
| abb | pcm600 | 2.3.0.60 | CNA |
| abb | pcm600 | 2.4.20041.1 | CNA |
| abb | pcm600 | 2.4.20119.2 | CNA |
Common Weakness Enumeration
References