Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2022-1607

Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB Pulsar Plus System Controller NE843_S

Default version status: unaffected

  • comcode 150042936affected

ABB Infinity DC Power Plant

Default version status: unaffected

  • H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415affected

References