CVE-2021-22277

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
ABB	800xA, Control Software for AC 800M	>= 5.1.0-0, < unspecified; >= unspecified, <= 5.1.0-3; >= 5.1.1-0, < unspecified; >= unspecified, <= 5.1.1-4; >= 6.0.0-0, < unspecified; >= unspecified, <= 6.0.0-3; >= 6.1.0-0, < unspecified; >= unspecified, <= 6.1.1-1
ABB	Control Builder Safe	1.x; 2.0; 3.0
ABB	Compact Product Suite - Control and I/O	>= 5.1.0-0, < unspecified; >= unspecified, <= 5.1.0-3; >= 5.1.1-0, < unspecified; >= unspecified, <= 5.1.1-4; >= 6.0.0-0, < unspecified; >= unspecified, <= 6.0.0-3; >= 6.1.0-0, < unspecified; >= unspecified, <= 6.1.1-1
ABB	ABB Base Software for SoftControl	>= 5.1.0-0, < unspecified; >= unspecified, <= 5.1.0-3; >= 5.1.1-0, < unspecified; >= unspecified, <= 5.1.1-4; >= 6.0.0-0, < unspecified; >= unspecified, <= 6.0.0-3; >= 6.1.0-0, < unspecified; >= unspecified, <= 6.1.1-1

References

Timeline

Published: Apr 1, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-222786.7A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on compute CVE-2021-222799.8A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the rob CVE-2021-22288.1Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that a CVE-2021-222807.2Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code CVE-2021-222817.5: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Aut CVE-2021-222827.8Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Executio CVE-2021-222835.5Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, A CVE-2021-222848.8Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code i CVE-2021-222857.5Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI8 CVE-2021-222867.5Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the CVE-2021-222887.5Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the CVE-2021-222899.8Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated