CVE:CVE-2022-1596
CNNVD:CNNVD-202206-2129
ABB REX640是瑞士ABB公司的一款一体化保护继电器。适用于各种先进配电场景。
ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 存在安全漏洞，该漏洞源于关键资源漏洞的错误权限分配允许经过身份验证的攻击者对用户数据库文件发起攻击并尝试控制受影响的系统节点。
solution:Upgrade abb rex640_pcl1_firmware to a higher version than 1.0.7,and avoid the version (,1.0.7]; Upgrade abb rex640_pcl2_firmware to a higher version than 1.1.4,and avoid the version (,1.1.4); Upgrade abb rex640_pcl3_firmware to a higher version than 1.2.1,and avoid the version (,1.2.1)