VULNERABILITY INTELLIGENCE
CVE-2022-1596
CVSS score6.5 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2022-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.
Weakness classification
- cybersecurity@ch.abb.com: CWE-732
- nvd@nist.gov: CWE-732
Primary references
- cybersecurity@ch.abb.com — Mitigation, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory