Back to Database
Status published
High
CVE-2021-22284
SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability
Vulnerability Description
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-22284
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- ABB thanks William Knowles at Applied Risk for helping to identify the vulnerabilities and protecting our customers.
More from ABB
View All →CVE-2025-9970
Application credential stored in clear text in memory
Medium
5.7
CVE-2025-9574
Missing Authentication Vulnerability
Critical
9.9
CVE-2025-8754
ABB AbilityTM zenon Remote Transport Vulnerability
High
8.7
CVE-2025-7745
Modbus TCP buffer overread
Medium
6.9
CVE-2025-7705
Authentication bypass due to compatibility mode enabled by default
High
8.6
Affected Vendor
Affected Software
800xA, Control Software for AC 800M OPC Server for AC 800M, Control Builder Safe, version 1.x OPC Server for AC 800M, Control Builder Safe, version 2.0 OPC Server for AC 800M, Compact Product Suite - Control and I/O OPC Server for AC 800M
Vulnerable Versions:
unspecified, 6.0.0-1, 6.0.0-2, 6.0.0-3, 5.1.1-1
Timeline
Official Publish:
February 4th, 2022
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H