A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Update_manager | Abb | 2.1 (including) | 2.1 (including) |
| Update_manager | Abb | 2.1.0.4 (including) | 2.1.0.4 (including) |
| Update_manager | Abb | 2.2 (including) | 2.2 (including) |
| Update_manager | Abb | 2.2.0.1 (including) | 2.2.0.1 (including) |
| Update_manager | Abb | 2.2.0.2 (including) | 2.2.0.2 (including) |
| Update_manager | Abb | 2.2.0.23 (including) | 2.2.0.23 (including) |
| Update_manager | Abb | 2.3.0.60 (including) | 2.3.0.60 (including) |
| Update_manager | Abb | 2.4.20041.1 (including) | 2.4.20041.1 (including) |
| Update_manager | Abb | 2.4.20119.2 (including) | 2.4.20119.2 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://search.abb.com/library/Download.aspx?DocumentID=2NGA001142\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000056\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2NGA001142\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000056\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch