CVE-2022-4126 - CVE House

Status published Critical CVE-2022-4126

Use of Default Password

9.6 CVSS

Vulnerability Description

Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: before 4.40 230207.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4126

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

ABB thanks Pablo Valle Alvear from Titanium Industrial Security for finding the vulnerability and protecting our customers.

References

https://search.abb.com/library/Download.aspx?DocumentID=2CMT006099_EN&LanguageCode=en&DocumentPartId=&Action=Launch

More from ABB

View All →

CVE-2025-9970

Application credential stored in clear text in memory

Medium 5.7

CVE-2025-9574

Missing Authentication Vulnerability

Critical 9.9

CVE-2025-8754

ABB AbilityTM zenon Remote Transport Vulnerability

High 8.7

CVE-2025-7745

Modbus TCP buffer overread

Medium 6.9

CVE-2025-7705

Authentication bypass due to compatibility mode enabled by default

High 8.6

Affected Vendor

ABB

View all reports →

Affected Software

RCCMD

Vulnerable Versions:

Timeline

Official Publish: March 27th, 2023

Last Modified: February 19th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1393

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.