CVE-2022-0947CWE-665

Arctic Wireless Gateway Firewall vulnerability

Critical · published May 10, 2022

CVSS v3.1
9.0
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

🔥 Hackers could remotely hijack your ABB ARG600 Wireless Gateway with just the right configuration! 🚨 Think of it like an unmonitored door to your important data center — if there's no one checking who goes in and out, anyone could just walk in and take control! An attacker exploiting this vulnerability could gain access to critical systems, potentially leading to unauthorized control over connected devices. This is absolutely devastating, as they could manipulate operations or extract sensitive information at will!

Put simply

Think of it like an unmonitored door to your important data center — if there's no one checking who goes in and out, anyone could just walk in and take control! CVE-2022-0947 allows attackers to exploit the ABB ARG600's remote access capabilities via its serial port, dependent on how the gateway is configured. This means that with the right setup, unauthorized users can connect and control your devices without any protective barriers.

What to do

An attacker exploiting this vulnerability could gain access to critical systems, potentially leading to unauthorized control over connected devices. This is absolutely devastating, as they could manipulate operations or extract sensitive information at will! To safeguard your systems, immediately review and tighten the configuration settings of your ABB ARG600 devices. Ensure remote access is properly secured, and patch to the latest firmware provided by ABB. Don't forget to audit your network for any unusual connections! You've got this! By taking these steps, you'll lock down your systems and keep them safe from intruders! 🛡️

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.7th percentile
Weakness
CWE-665 · Improper Initialization
Published
2022-05-10T18:58Z
EPSS history
Timeline
  • 10 MAY 18:58Z
    Arctic Wireless Gateway Firewall vulnerability
    cvelistv5