CVE-2022-1607 — Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

Affected (CNA)

Vendor / product	Versions
ABB / Pulsar Plus System Controller NE843_S	affected comcode 150042936
ABB / Infinity DC Power Plant	affected H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415

CWE

CWE-352

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CVE

No English description supplied.

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch

CISA-ADP

No English description supplied.

No references supplied.