Threat Encyclopedia

ABB.Flow.Computer.TotalFlow.Path.Traversal

Description

This indicates an attack attempt to exploit a Path Traversal vulnerability in ABB Flow Computer and Remote Controller products.
The vulnerability is due to improper restriction of a pathname. A remote attacker may be able to exploit this to execute arbitrary commands within the context of the vulnerable system.

Affected Products

RMC-100 (Standard)
RMC-100-LITE
XIO
XFC G5
XRC G5
uFLO G5
UDC

Impact

System Compromise: Remote attackers can execute arbitrary script code within the context of the affected system.

Recommended Actions

Apply the latest update from the vendor.
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A0927

CVE References

CVE-2022-0902

Telemetry