A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Update_manager | Abb | 2.1 (including) | 2.1 (including) |
| Update_manager | Abb | 2.1.0.4 (including) | 2.1.0.4 (including) |
| Update_manager | Abb | 2.2 (including) | 2.2 (including) |
| Update_manager | Abb | 2.2.0.1 (including) | 2.2.0.1 (including) |
| Update_manager | Abb | 2.2.0.2 (including) | 2.2.0.2 (including) |
| Update_manager | Abb | 2.2.0.23 (including) | 2.2.0.23 (including) |
| Update_manager | Abb | 2.3.0.60 (including) | 2.3.0.60 (including) |
| Update_manager | Abb | 2.4.20041.1 (including) | 2.4.20041.1 (including) |
| Update_manager | Abb | 2.4.20119.2 (including) | 2.4.20119.2 (including) |