PT-2022-9233 · Abb · Control Software For Ac 800M+4

Published 2022-02-17 · Updated 2022-04-11 · CVE-2021-22277

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ABB 800xA (affected versions not specified) Control Software for AC 800M (affected versions not specified) Control Builder Safe (affected versions not specified) Compact Product Suite - Control and I/O (affected versions not specified) ABB Base Software for SoftControl (affected versions not specified)

Description The issue is related to improper input validation, allowing an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-12646

CVE-2021-22277

Affected Products

Abb 800Xa

Base Software For Softcontrol

Compact Product Suite - Control/I/O

Control Builder Safe

Control Software For Ac 800M

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-22277 · Security Note
• https://bdu.fstec.ru/vul/2025-12646 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22277 · Vendor Advisory
• https://library.e.abb.com/public/0a90fe8f13a64e769a8dfe262965c5de/7PAA001499_A_en_SECURITY+-+AC+800M+MMS+-+Denial+of+Service+vulnerability+in+MMS+communication.pdf?x-sign=b8EcnwMcJ42NIyG1%2FWEy6s1uz%2BqpW3zvy6B60JSeStI1a1yk8P4rLCqqS5ovpYgA · Note
• https://t.me/cibsecurity/40055 · Telegram Post