VYPR
← All advisories
High severity8.1NVD Advisory· Published Jul 21, 2022· Updated Jun 17, 2026

CVE-2022-0902

CVE-2022-0902

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC-100 (Standard), RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC) allows an attacker who successfully exploited this vulnerability could insert and run arbitrary code in an affected system node.

Affected products

21
  • Abb/Rmc 100 Lite Firmware
    cpe:2.3:o:abb:rmc-100-lite_firmware:*:*:*:*:*:*:*:*
    Range: <2106229-011
  • Abb/Rmc 100 Firmware
    cpe:2.3:o:abb:rmc-100_firmware:*:*:*:*:*:*:*:*
    Range: <2105457-037
  • Abb/Udc Firmware
    cpe:2.3:o:abb:udc_firmware:*:*:*:*:*:*:*:*
    Range: <2106177-007
  • Abb/Uflog5 Firmware
    cpe:2.3:o:abb:uflog5_firmware:*:*:*:*:*:*:*:*
    Range: <2105298-024
  • Abb/Xfcg5 Firmware
    cpe:2.3:o:abb:xfcg5_firmware:*:*:*:*:*:*:*:*
    Range: <2105805-016
  • Abb/Xio Firmware
    cpe:2.3:o:abb:xio_firmware:*:*:*:*:*:*:*:*
    Range: <2106198-008
  • Abb/Xrcg5 Firmware
    cpe:2.3:o:abb:xrcg5_firmware:*:*:*:*:*:*:*:*
    Range: <2105864-016
  • Abb/RMC-100 (Standard)llm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • Abb/RMC-100-LITEllm-create
  • Abb/XIOllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • Abb/XFCG5llm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • Abb/XRCG5llm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • Abb/uFLOG5llm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • Abb/UDCllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • Abb/RMC-100cpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.