CVE-2022-1596
Medium
Description
Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.
SeverityMedium
CVSS6.5
Exploit probability—
ProductAbb Rex640 Pcl1 Firmware
PublishedJun 21, 2022
First seenJun 21, 2022
Weakness typeCWE-732CWE-732
How to fix
Update
- abb rex640_pcl2_firmware1.1.4 or later
- abb rex640_pcl3_firmware1.2.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb rex640_pcl1_firmware | v ≤ 1.0.7 | — |
| abb rex640_pcl2_firmware | v < 1.1.4 | 1.1.4 |
| abb rex640_pcl3_firmware | v < 1.2.1 | 1.2.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.