Back to Database
Status published
Medium
CVE-2021-22278
Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool
Vulnerability Description
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-22278
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- ABB and Hitachi Energy thank CyTRICS researcher May Chaffin for helping to identify the vulnerabilities and protecting our customers.
References
More from ABB
View All →CVE-2025-9970
Application credential stored in clear text in memory
Medium
5.7
CVE-2025-9574
Missing Authentication Vulnerability
Critical
9.9
CVE-2025-8754
ABB AbilityTM zenon Remote Transport Vulnerability
High
8.7
CVE-2025-7745
Modbus TCP buffer overread
Medium
6.9
CVE-2025-7705
Authentication bypass due to compatibility mode enabled by default
High
8.6
Affected Vendor
Affected Software
PCM600, PCM600 Update Manager
Vulnerable Versions:
2.7, unspecified, 2.1, 2.1.0.4, 2.2, 2.2.0.1, 2.2.0.2, 2.2.0.23, 2.3.0.60, 2.4.20041.1, 2.4.20119.2
Timeline
Official Publish:
October 28th, 2021
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H