CVE-2022-26080

Medium

Description

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

SeverityMedium
CVSS6.3
Exploit probability—
ProductAbb H5692448 G104 Firmware
PublishedMar 16, 2023
First seenMar 16, 2023
Weakness typeCWE-330CWE-330

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
abb h5692448_g104_firmwareNo range specified—
abb h5692448_g842_firmwareNo range specified—
abb h5692448_g224l_firmwareNo range specified—
abb h5692448_g630-4_firmwareNo range specified—
abb h5692448_g451c\(2\)_firmwareNo range specified—
abb h5692448_g461\(2\)_firmwareNo range specified—
abb ne843_s_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.