CVE-2022-26080 Easily guessable session ID's in NE843 Pulsar Plus Controller
Attackers can guess session IDs to hijack sessions on ABB Pulsar Plus and Infinity DC Power Plant controllers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-26080?
CVE-2022-26080 is a medium-severity vulnerability in ABB Infinity DC Power Plant, published on 16 Mar 2023. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.
Weakness: CWE-330
Which versions are affected by CVE-2022-26080?
It affects 7 products.
Products include Abb H5692448 G104 Firmware, Abb H5692448 G224l Firmware, Abb H5692448 G451c\(2\) Firmware, Abb H5692448 G461\(2\) Firmware, Abb H5692448 G630-4 Firmware, Abb H5692448 G842 Firmware and 1 more.
How do I fix CVE-2022-26080?
No fix has been published for CVE-2022-26080 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-26080 being exploited?
There is no known exploitation of CVE-2022-26080 in the wild and no public exploit code.
Sources
Also known as GHSA-cwxp-h4pj-wvp5.