CVE-2021-22278

MEDIUM 6.7CVE-2021-22278 · Published 28/10/2021 · updated 17/06/2026

In short

CVE-2021-22278 is a MEDIUM (CVSS 6.7) vulnerability affecting update manager (abb).
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
update manager abb	`= 2.1= 2.1.0.4= 2.2= 2.2.0.1= 2.2.0.2= 2.2.0.23= 2.3.0.60= 2.4.20041.1= 2.4.20119.2≥ 2.7, ≤ 2.10`	No fix yet

Description

A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.

References

search.abb.com/library/Download.aspx · Vendor Advisory
search.abb.com/library/Download.aspx · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free