ICSA-22-097-02

icsaUScisa_csaf_ot

ABB SPIET800 and PNI800

view advisory published 2022-04-07

Successful exploitation of these vulnerabilities could cause the affect device to become unresponsive, resulting in a denial-of-service condition and requiring a manual reboot.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2021-22288UShigh7.5—
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.
CVE-2021-22286UShigh7.5—
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.
CVE-2021-22285UShigh7.5—
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cau…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationPNI800

    ABB advises users to review their installations to determine if they are using an impacted product as listed above.

  • MitigationPNI800

    ABB advises users to review their installations to determine if they are using an impacted product as listed above.

  • MitigationPNI800

    ABB advises users to review their installations to determine if they are using an impacted product as listed above.

  • MitigationSPIET800

    ABB advises users to review their installations to determine if they are using an impacted product as listed above.

  • MitigationSPIET800

    ABB advises users to review their installations to determine if they are using an impacted product as listed above.

  • MitigationSPIET800

    ABB advises users to review their installations to determine if they are using an impacted product as listed above.

  • FixedPNI800

    SPIET800: Update to Version A_C or later (planned Q2 2022)

  • FixedPNI800

    SPIET800: Update to Version A_C or later (planned Q2 2022)

  • FixedPNI800

    SPIET800: Update to Version A_C or later (planned Q2 2022)

  • FixedSPIET800

    SPIET800: Update to Version A_C or later (planned Q2 2022)

  • FixedSPIET800

    SPIET800: Update to Version A_C or later (planned Q2 2022)

  • FixedSPIET800

    SPIET800: Update to Version A_C or later (planned Q2 2022)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan