PT-2022-19178 · Abb · Abb E-Design

Published 2022-05-26 · Updated 2022-11-03 · CVE-2022-28702

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions ABB e-Design (affected versions not specified)

Description The issue concerns a vulnerability in ABB e-Design that allows an attacker to install malicious software, executing with SYSTEM permissions. This compromises the confidentiality, integrity, and availability of the target machine. There is also a mention of a denial-of-service vulnerability related to link following.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2025-05615

CVE-2022-28702

ZDI-22-875

Affected Products

Abb E-Design

References · 6

• https://zerodayinitiative.com/advisories/ZDI-22-875 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28702 · Security Note
• https://bdu.fstec.ru/vul/2025-05615 · Security Note
• https://osv.dev/vulnerability/CVE-2022-28702 · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2%20CMT%200%200%206%200%208%206&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2%20CMT%200%200%206%200%208%206&LanguageCode=en&DocumentPartId=&Action=Launch · Note