4.6 Medium

CVE-2022-1607 Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power…

Description

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

Affected products and versions

Product	Affected versions	Fixed in
Pulsar Plus System Controller NE843_S	Versions not published
Infinity DC Power Plant	Versions not published

The 2 CVEs of Pulsar Plus System Controller NE843_S →

CVE-2022-26080 Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power… 6.3 Medium

Do you use Pulsar Plus System Controller NE843_S ?

Track this CVE Watch Pulsar Plus System Controller NE843_S Check my SBOMs

www.cveye.io/en/cve/CVE-2022-1607

Timeline

Published February 24, 2023
Last modified March 11, 2025

References

search.abb.com search.abb.com

Track this CVE

CVE-2022-1607 Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power…

Description

Affected products and versions

Other CVEs of Pulsar Plus System Controller NE843_S