High severity · published Aug 24, 2022
CVE-2022-34838
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
8.4
CVSS
0.2%
EPSS
No
On KEV
Description
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AZ
ABB Zenon · ABB
through 8.20 · source: vendor
ZE
Zenon · Abb
through 8.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-34838
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-34838
Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch
More from ABB Zenon
8.2
CVE-2022-34836
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
6.1
CVE-2022-34837
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control