CVE-2021-22278

Thursday, October 28, 2021

6.7

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Summary

A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.

Affected Software

Vendor	Product	Version Range	Status
ABB	PCM600	`2.7 < unspecified`	affected
ABB	PCM600	`unspecified <= 2.10`	affected
ABB	PCM600 Update Manager	`2.1`	affected
ABB	PCM600 Update Manager	`2.1.0.4`	affected
ABB	PCM600 Update Manager	`2.2`	affected
ABB	PCM600 Update Manager	`2.2.0.1`	affected
ABB	PCM600 Update Manager	`2.2.0.2`	affected
ABB	PCM600 Update Manager	`2.2.0.23`	affected
ABB	PCM600 Update Manager	`2.3.0.60`	affected
ABB	PCM600 Update Manager	`2.4.20041.1`	affected
ABB	PCM600 Update Manager	`2.4.20119.2`	affected
Hitachi Energy	PCM600	`2.7 < unspecified`	affected
Hitachi Energy	PCM600	`unspecified <= 2.10`	affected
Hitachi Energy	PCM600 Update Manager	`2.1`	affected
Hitachi Energy	PCM600 Update Manager	`2.1.0.4`	affected
Hitachi Energy	PCM600 Update Manager	`2.2`	affected
Hitachi Energy	PCM600 Update Manager	`2.2.0.1`	affected
Hitachi Energy	PCM600 Update Manager	`2.2.0.2`	affected
Hitachi Energy	PCM600 Update Manager	`2.2.0.23`	affected
Hitachi Energy	PCM600 Update Manager	`2.3.0.60`	affected
Hitachi Energy	PCM600 Update Manager	`2.4.20041.1`	affected
Hitachi Energy	PCM600 Update Manager	`2.4.20119.2`	affected

Weaknesses

CWE-295: CWE-295 Improper Certificate Validation

ADP Enrichment

CVE Program Container

Additional References

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.