CVE-2021-22288: SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module
First published: Fri Feb 04 2022(Updated: )
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.
Credit: cybersecurity@ch.abb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Abb Pni800 Firmware | <=a_b | |
| Abb Pni800 | ||
| Abb Spiet800 Firmware | <=a_b | |
| ABB SPIET800 |
Remedy
ABB advises all customers to review their installations to determine if they are using an impacted product as listed above. – SPIET800 devices with firmware version A_B or earlier are affected. All the vulnerabilities will be corrected in version A_C or later. – PNI800 devices with firmware version A_B or earlier are affected. All the vulnerabilities will be corrected in version B_0 or later.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this ABB SPIET800 and PNI800 module vulnerability?
The vulnerability ID for this ABB SPIET800 and PNI800 module vulnerability is CVE-2021-22288.
What is the severity of CVE-2021-22288?
The severity of CVE-2021-22288 is high, with a severity value of 7.5 out of 10.
What is the affected software for CVE-2021-22288?
The affected software for CVE-2021-22288 includes ABB PNI800 and ABB SPIET800 with certain firmware versions.
What can an attacker do with CVE-2021-22288?
An attacker can cause a denial of service or make the ABB SPIET800 and PNI800 module unresponsive.
Is ABB PNI800 and ABB SPIET800 vulnerable to CVE-2021-22288?
ABB PNI800 and ABB SPIET800 are not vulnerable to CVE-2021-22288.
How do I fix CVE-2021-22288?
To fix CVE-2021-22288, users should follow the recommendations provided by ABB in their advisory and update to the latest firmware versions.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/remedy
- agent/title
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/abb
- canonical/abb pni800 firmware
- version/abb pni800 firmware/a_b
- canonical/abb pni800
- canonical/abb spiet800 firmware
- version/abb spiet800 firmware/a_b
- canonical/abb spiet800