{"id":"CVE-2022-34838","aliases":["EUVD-2022-37744","GHSA-gm2j-544r-33fw"],"status":"published","title":"ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control","description":"Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00152,"percentile":0.04413,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-257","CWE-522"],"published":"2022-08-24T15:15:26Z","modified":"2026-06-17T04:51:01Z","products":[{"vendor":"abb","product":"abb zenon"},{"vendor":"abb","product":"zenon"}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34838"},{"url":"https://github.com/advisories/GHSA-gm2j-544r-33fw"}],"sources":{"cve":[{"id":"CVE-2022-34838","title":"ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control","description":"Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.","status":"published","published":"2022-08-24T15:15:26.256Z","modified":"2024-09-17T02:53:31.652Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T14:34:42.354707Z"}],"euvd":[{"id":"EUVD-2022-37744","description":"Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.","status":"published","published":"2022-08-24T15:15:26Z","modified":"2024-09-17T02:53:31Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:36.484067Z"}],"ghsa":[{"id":"GHSA-gm2j-544r-33fw","title":"Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who...","description":"Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.","status":"published","published":"2022-08-25T00:00:27Z","modified":"2023-01-28T05:01:30Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:43:34.628173Z"}],"nvd":[{"id":"CVE-2022-34838","description":"Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.","status":"published","published":"2022-08-24T16:15:12.323Z","modified":"2026-06-17T04:51:01.427Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-257","CWE-522"],"updated_at":"2026-11-02T14:07:25.883929Z"}]}}