CVE-2021-22277: AC 800M MMS - Denial of Service vulnerability in MMS communication

Q: What is the vulnerability ID of this ABB 800xA vulnerability?

The vulnerability ID is CVE-2021-22277.

Q: What is the severity of CVE-2021-22277?

The severity of CVE-2021-22277 is high with a CVSS score of 7.5.

Q: Which software versions are affected by CVE-2021-22277?

ABB 800xA versions 5.1.0-0 to 5.1.0-3, 5.1.1-0 to 5.1.1-4, 6.0.0-0 to 6.0.0-4, and 6.1.0-0 to 6.1.1-2 are affected by CVE-2021-22277. Abb Base Software versions 5.1.0-0 to 5.1.0-3, 5.1.1-0 to 5.1.1-4, 6.0.0-0 to 6.0.0-3, and 6.1.0-0 to 6.1.1-1 are also affected.

Q: How can an attacker exploit this vulnerability?

An attacker can exploit CVE-2021-22277 to cause a denial of service.

Q: Is there a fix for CVE-2021-22277?

ABB has released a security advisory which provides guidance on mitigating the vulnerability. Please refer to the reference link for more information.

Published Apr 1, 2022

Updated

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.

Affected Software

13 affected components

ABB 800xA>=5.1.0-0<=5.1.0-3

ABB 800xA>=5.1.1-0<=5.1.1-4

ABB 800xA>=6.0.0-0<6.0.0-4

ABB 800xA>=6.1.0-0<6.1.1-2

ABB Base Software Softcontrol>=5.1.0-0<=5.1.0-3

ABB Base Software Softcontrol>=5.1.1-0<=5.1.1-4

ABB Base Software Softcontrol>=6.0.0-0<=6.0.0-3

ABB Base Software Softcontrol>=6.1.0-0<=6.1.1-1

ABB Compact Product Suite>=5.1.0-0<=5.1.0-3

ABB Compact Product Suite>=5.1.1-0<=5.1.1-4

ABB Compact Product Suite>=6.0.0-0<=6.0.0-3

ABB Compact Product Suite>=6.1.0-0<=6.1.1-1

ABB Control Builder Safe<3.0

Event History

Apr 1, 2022

CVE Published

via MITRE·10:17 PM

Data Sourced

via MITRE·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this ABB 800xA vulnerability?

The vulnerability ID is CVE-2021-22277.

What is the severity of CVE-2021-22277?

The severity of CVE-2021-22277 is high with a CVSS score of 7.5.

Which software versions are affected by CVE-2021-22277?

ABB 800xA versions 5.1.0-0 to 5.1.0-3, 5.1.1-0 to 5.1.1-4, 6.0.0-0 to 6.0.0-4, and 6.1.0-0 to 6.1.1-2 are affected by CVE-2021-22277. Abb Base Software versions 5.1.0-0 to 5.1.0-3, 5.1.1-0 to 5.1.1-4, 6.0.0-0 to 6.0.0-3, and 6.1.0-0 to 6.1.1-1 are also affected.

How can an attacker exploit this vulnerability?

An attacker can exploit CVE-2021-22277 to cause a denial of service.

Is there a fix for CVE-2021-22277?