What’s Vulnerable › Vulnerabilities

CVE-2022-34838: ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-24 · updated 2026-06-17
• Weakness: CWE-257

Description

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.

Affected products

• ABB Ability™ zenon: through 8.20

References

• https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2022-34838 or the next vulnerability affects your stack