Description (CNA)
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ABB / PCM600 | affected 2.7 before unspecified; affected unspecified through 2.10 |
| ABB / PCM600 Update Manager | affected 2.1; affected 2.1.0.4; affected 2.2; affected 2.2.0.1; affected 2.2.0.2; affected 2.2.0.23; affected 2.3.0.60; affected 2.4.20041.1; affected 2.4.20119.2 |
| Hitachi Energy / PCM600 | affected 2.7 before unspecified; affected unspecified through 2.10 |
| Hitachi Energy / PCM600 Update Manager | affected 2.1; affected 2.1.0.4; affected 2.2; affected 2.2.0.1; affected 2.2.0.2; affected 2.2.0.23; affected 2.3.0.60; affected 2.4.20041.1; affected 2.4.20119.2 |
CWE
CWE-295
References
- https://search.abb.com/library/Download.aspx?DocumentID=2NGA001142&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000056&LanguageCode=en&DocumentPartId=&Action=Launch
ADP enrichment
No English description supplied.