CWE
330
Advisory Published
Updated

CVE-2022-26080: Easily guessable session ID's in NE843 Pulsar Plus Controller

First published: Thu Mar 16 2023(Updated: )

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

Credit: cybersecurity@ch.abb.com

Affected SoftwareAffected VersionHow to fix
Abb H5692448 G104 Firmware
Abb H5692448 G104
Abb H5692448 G842 Firmware
Abb H5692448 G842
Abb H5692448 G224l Firmware
Abb H5692448 G224l
Abb H5692448 G630-4 Firmware
Abb H5692448 G630-4
Abb H5692448 G451c\(2\) Firmware
Abb H5692448 G451c\(2\)
Abb H5692448 G461\(2\) Firmware
Abb H5692448 G461\(2\)
Abb Ne843 S Firmware
Abb Ne843 S

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this vulnerability?

    The vulnerability ID for this vulnerability is CVE-2022-26080.

  • Which software products are affected by this vulnerability?

    This vulnerability affects ABB Pulsar Plus System Controller NE843_S and ABB Infinity DC Power Plant.

  • What is the severity of CVE-2022-26080?

    The severity of CVE-2022-26080 is medium with a CVSS score of 4.3.

  • How can I fix CVE-2022-26080?

    To fix CVE-2022-26080, it is recommended to follow the security advisory provided by ABB.

  • Where can I find more information about this vulnerability?

    You can find more information about this vulnerability in the ABB security advisory linked in the references.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203