Skip to content
CVE Tracker
Back

CVE-2022-0010

QCS 800xA Vulnerability identified in system log files

High7.8EPSS 0.23%
Published
Updated
Reserved
Assigned by
ABB

Description

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.

Scores

CVSS scores of CVE-2022-0010, by who scored it
Scored byCVSSScoreVector
ABBCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
0.23% · top 87% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • ABB · QCS 800xA

    • affected 1.0;0 – ≤ 6.1SP2

  • ABB · QCS AC450

    • affected 1.0;0 – ≤ 5.1SP2

  • ABB · Platform Engineering Tools

    • affected 1.0:0 – ≤ 2.3.0

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .