cveboard RSS feed

CVE-2022-0902

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC-100 (Standard), RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC) allows an attacker who successfully exploited this vulnerability could insert and run arbitrary code in an affected system node.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

RMC-100 (Standard)

Vendor
ABB
Product
RMC-100 (Standard)
Platforms
Unknown
Default status
Unknown
RMC-100 (Standard) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2105457-037UnavailableNone listed

RMC-100-LITE

Vendor
ABB
Product
RMC-100-LITE
Platforms
Unknown
Default status
Unknown
RMC-100-LITE · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2106229-011UnavailableNone listed

XIO

Vendor
ABB
Product
XIO
Platforms
Unknown
Default status
Unknown
XIO · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2106198-008UnavailableNone listed

XFCG5

Vendor
ABB
Product
XFCG5
Platforms
Unknown
Default status
Unknown
XFCG5 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2105805-016UnavailableNone listed

XRCG5

Vendor
ABB
Product
XRCG5
Platforms
Unknown
Default status
Unknown
XRCG5 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2105864-016UnavailableNone listed

uFLOG5

Vendor
ABB
Product
uFLOG5
Platforms
Unknown
Default status
Unknown
uFLOG5 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2105298-024UnavailableNone listed

UDC

Vendor
ABB
Product
UDC
Platforms
Unknown
Default status
Unknown
UDC · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom2106177-007UnavailableNone listed