{"id":"CVE-2022-0947","aliases":["EUVD-2022-15961","GHSA-w565-vp76-f965"],"status":"published","title":"Arctic Wireless Gateway Firewall vulnerability","description":"A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.","severity":{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00877,"percentile":0.59501,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-665"],"published":"2022-05-10T18:58:01Z","modified":"2026-06-17T04:21:31Z","products":[{"vendor":"abb","product":"abb arg600 wireless gateway series"},{"vendor":"abb","product":"arc600a2323na_firmware"},{"vendor":"abb","product":"arc600a2324na_firmware"},{"vendor":"abb","product":"arc600a2325na_firmware"},{"vendor":"abb","product":"arg600a1220na_firmware"},{"vendor":"abb","product":"arg600a1230na_firmware"},{"vendor":"abb","product":"arg600a1240na_firmware"},{"vendor":"abb","product":"arg600a1260na_firmware"},{"vendor":"abb","product":"arg600a2622na_firmware"},{"vendor":"abb","product":"arg600a2625na_firmware"},{"vendor":"abb","product":"arp600a2200na_firmware"},{"vendor":"abb","product":"arp600a2220na_firmware"},{"vendor":"abb","product":"arp600a2250na_firmware"},{"vendor":"abb","product":"arp600a2260na_firmware"},{"vendor":"abb","product":"arp600a2560na_firmware"},{"vendor":"abb","product":"arp600a2651na_firmware"},{"vendor":"abb","product":"arr600a3201na_firmware"},{"vendor":"abb","product":"arr600a3202na_firmware"},{"vendor":"abb","product":"arr600a3221na_firmware"},{"vendor":"abb","product":"arr600a3222na_firmware"},{"vendor":"abb","product":"arr600a3251na_firmware"},{"vendor":"abb","product":"arr600a3252na_firmware"},{"vendor":"abb","product":"arr600a3261na_firmware"},{"vendor":"abb","product":"arr600a3262na_firmware"},{"vendor":"abb","product":"viola_systems_arctic_firmware"}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=2NGA001253\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0947"},{"url":"https://github.com/advisories/GHSA-w565-vp76-f965"}],"sources":{"cve":[{"id":"CVE-2022-0947","title":"Arctic Wireless Gateway Firewall vulnerability","description":"A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.","status":"published","published":"2022-05-10T18:58:01.818Z","modified":"2024-09-17T01:01:17.567Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15961","description":"A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.","status":"published","published":"2022-05-10T18:58:01Z","modified":"2024-09-17T01:01:17Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:28:53.686001Z"}],"ghsa":[{"id":"GHSA-w565-vp76-f965","title":"A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the...","description":"A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.","status":"published","published":"2022-05-11T00:01:13Z","modified":"2023-02-01T05:02:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:49:51.819251Z"}],"nvd":[{"id":"CVE-2022-0947","description":"A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.","status":"published","published":"2022-05-10T19:15:09.093Z","modified":"2026-06-17T04:21:31.92Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:07:19.51203Z"}]}}
