CVE-2022-26080

Published: Mar 16, 2023Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

Affected (7)

Products: Abb: H5692448 G104 Firmware, H5692448 G842 Firmware, H5692448 G224l Firmware, H5692448 G630 4 Firmware, H5692448 G451c(2) Firmware, H5692448 G461(2) Firmware, Ne843 S Firmware

Abb

7 products

H5692448 G104 Firmware

H5692448 G842 Firmware

H5692448 G224l Firmware

H5692448 G630 4 Firmware

H5692448 G451c(2) Firmware

H5692448 G461(2) Firmware

Ne843 S Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb H5692448 G104 Firmware	All versions

Running on/with	Platform Versions
Abb H5692448 G104	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb H5692448 G842 Firmware	All versions

Running on/with	Platform Versions
Abb H5692448 G842	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb H5692448 G224l Firmware	All versions

Running on/with	Platform Versions
Abb H5692448 G224l	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb H5692448 G630 4 Firmware	All versions

Running on/with	Platform Versions
Abb H5692448 G630 4	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb H5692448 G451c(2) Firmware	All versions

Running on/with	Platform Versions
Abb H5692448 G451c(2)	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb H5692448 G461(2) Firmware	All versions

Running on/with	Platform Versions
Abb H5692448 G461(2)	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Ne843 S Firmware	All versions

Running on/with	Platform Versions
Abb Ne843 S	All versions

Related CWEs

CWE-330

Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (2)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256117643.1223066510.1678942947-1879524908.1677751217

Source: cybersecurity@ch.abb.com

Vendor Advisory

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256117643.1223066510.1678942947-1879524908.1677751217

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.