RMC-100 Vulnerability in the Web UI (REST Interface)
An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24999US | high7.5 | Exploit | ||
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be use… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- FixedRMC-100
The problem is corrected in the following product versions: RMC-100 Customer Package (2105452-048). RMC-100 LITE Customer Package (2106260-017). ABB recommends that customers apply the update at earliest convenience. Please find these updates here: RMC - Flow Computers (Flow Computers, Remote Controllers and RTUs) | Flow Computers | ABB
https://new.abb.com/products/measurement-products/upstream-oil-and-gas/flow-computers-remote-controllers/flow-computers/rmc - FixedRMC-100 LITE
The problem is corrected in the following product versions: RMC-100 Customer Package (2105452-048). RMC-100 LITE Customer Package (2106260-017). ABB recommends that customers apply the update at earliest convenience. Please find these updates here: RMC - Flow Computers (Flow Computers, Remote Controllers and RTUs) | Flow Computers | ABB
https://new.abb.com/products/measurement-products/upstream-oil-and-gas/flow-computers-remote-controllers/flow-computers/rmc
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan