PT-2022-22385 · Abb · Abb Zenon

Published 2022-08-24 · Updated 2022-08-31 · CVE-2022-34836

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions ABB Zenon version 8.20

Description The issue allows a user to access files on the Zenon system, add their own log messages, and potentially flood log entries. An attacker could exploit this to access Zenon runtime activities, including starting and stopping various activities and viewing the last error code.

Recommendations For ABB Zenon version 8.20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Relative Path Traversal

Weakness Enumeration

CWE-22

CWE-23

Related Identifiers

CVE-2022-34836

Affected Products

Abb Zenon

References · 5

• https://osv.dev/vulnerability/CVE-2022-34836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34836 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://t.me/cvenotify/35511 · Telegram Post
• https://t.me/cibsecurity/48662 · Telegram Post