Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2021-22278

Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool

Description

A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB PCM600

  • 2.7 to < unspecifiedaffected
  • unspecified to ≤ 2.10affected

ABB PCM600 Update Manager

  • 2.1affected
  • 2.1.0.4affected
  • 2.2affected
  • 2.2.0.1affected
  • 2.2.0.2affected
  • 2.2.0.23affected
  • 2.3.0.60affected
  • 2.4.20041.1affected
  • 2.4.20119.2affected

Hitachi Energy PCM600

  • 2.7 to < unspecifiedaffected
  • unspecified to ≤ 2.10affected

Hitachi Energy PCM600 Update Manager

  • 2.1affected
  • 2.1.0.4affected
  • 2.2affected
  • 2.2.0.1affected
  • 2.2.0.2affected
  • 2.2.0.23affected
  • 2.3.0.60affected
  • 2.4.20041.1affected
  • 2.4.20119.2affected

References