PT-2022-22386 · Abb · Abb Zenon

Published 2022-08-24 · Updated 2022-08-29 · CVE-2022-34837

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions ABB Zenon version 8.20

Description The issue allows an attacker to store passwords in a recoverable format, potentially enabling them to add more network clients. These clients may then monitor various activities of the Zenon system.

Recommendations For ABB Zenon version 8.20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-257

CWE-522

Related Identifiers

CVE-2022-34837

Affected Products

Abb Zenon

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-34837 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34837 · Vendor Advisory