VULNERABILITY INTELLIGENCE
CVE-2021-22284
CVSS score8.4 HIGH
EPSS probability0.83%
CISA KEVNot currently listed
Published2022-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Description
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.
Weakness classification
- cybersecurity@ch.abb.com: CWE-732
- nvd@nist.gov: CWE-732
Primary references
- cybersecurity@ch.abb.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory