CWE
754 20
Advisory Published
Updated

CVE-2022-3192: Improper Check for Unusual or Exceptional Conditions

First published: Fri Mar 31 2023(Updated: )

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6.

Credit: cybersecurity@ch.abb.com cybersecurity@ch.abb.com

Affected SoftwareAffected VersionHow to fix
Abb Ac500 Cpu Firmware>=2.0.0<2.8.6
Abb Pm5630-2eth=2.0
Abb Pm5650-2eth=2.0
Abb Pm5670-2eth=2.0
Abb Pm5675-2eth=2.0
Abb Pm571-eth-v14x=2.0
Abb Pm571-v14x=2.0
Abb Pm572=2.0
Abb Pm573-eth=2.0
Abb Pm581-eth-v14x=2.0
Abb Pm581-v14x=2.0
Abb Pm582=2.0
Abb Pm582-arcnet=2.0
Abb Pm582-eth=2.0
Abb Pm582-v14x=2.0
Abb Pm583-eth=2.0
Abb Pm585-eth=2.0
Abb Pm585-mc-kit=2.0
Abb Pm590-arcnet-v14x=2.0
Abb Pm590-eth=2.0
Abb Pm590-eth-v14x=2.0
Abb Pm590-mc-kit=2.0
Abb Pm590-v14x=2.0
Abb Pm591-2eth=2.0
Abb Pm591-arcnet-v14x=2.0
Abb Pm591-eth=2.0
Abb Pm591-eth-v14x=2.0
Abb Pm591-v14x=2.0
Abb Pm592-eth=2.0
Abb Pm595-4eth-f=2.0

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this issue?

    The vulnerability ID is CVE-2022-3192.

  • What is the severity level of CVE-2022-3192?

    The severity level of CVE-2022-3192 is medium.

  • Which software is affected by CVE-2022-3192?

    The AC500 V2 firmware versions from 2.0.0 to 2.8.6 are affected by CVE-2022-3192.

  • What is the impact of CVE-2022-3192?

    CVE-2022-3192 allows for client-server protocol manipulation.

  • How can I fix CVE-2022-3192?

    There is currently no fix available for CVE-2022-3192. It is recommended to follow the mitigation steps provided by the vendor.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203