VULNERABILITY INTELLIGENCE
CVE-2022-28702
CVSS score6.1 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2022-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Description
Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine.
Weakness classification
- CWE-276: Incorrect Default Permissions
Primary references
- cybersecurity@ch.abb.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory