VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 15, 2022· Updated Jun 17, 2026

CVE-2022-31218

CVE-2022-31218

Description

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.

Affected products

9
  • Abb/Automation Builder2 versions
    cpe:2.3:a:abb:automation_builder:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:abb:automation_builder:*:*:*:*:*:*:*:*range: >=1.1.0,<=2.5.0
    • (no CPE)range: 1.1.0
  • Abb/Drive Composer5 versions
    cpe:2.3:a:abb:drive_composer:*:*:*:*:entry:*:*:*+ 4 more
    • cpe:2.3:a:abb:drive_composer:*:*:*:*:entry:*:*:*range: >=2.0,<2.7.1
    • cpe:2.3:a:abb:drive_composer:*:*:*:*:pro:*:*:*range: >=2.0,<2.7.1
    • (no CPE)
    • (no CPE)range: 2.0
    • (no CPE)range: 2.0
  • Abb/Mint Workbench
    cpe:2.3:a:abb:mint_workbench:*:*:*:*:*:*:*:*
    Range: <=5866
  • Abb/Mint Workbench Icpe-rescue
    Range: build

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.