ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access
Priority MEDIUM 59CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC-100 (Standard), RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC) allows an attacker who successfully exploited this vulnerability could insert and run arbitrary code in an affected system node.
Why it matters now
EPSS 0.16918 97th percentileScored 2026-11-07
Fix Fixed RMC-100 (Standard) (ABB): 2105457-037RMC-100-LITE (ABB): 2106229-011+5 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ABB | RMC-100 (Standard) | before 2105457-037 | 2105457-037 | Patch available | CNA |
| ABB | RMC-100-LITE | before 2106229-011 | 2106229-011 | Patch available | CNA |
| ABB | XIO | before 2106198-008 | 2106198-008 | Patch available | CNA |
| ABB | XFCG5 | before 2105805-016 | 2105805-016 | Patch available | CNA |
| ABB | XRCG5 | before 2105864-016 | 2105864-016 | Patch available | CNA |
| ABB | uFLOG5 | before 2105298-024 | 2105298-024 | Patch available | CNA |
| ABB | UDC | before 2106177-007 | 2106177-007 | Patch available | CNA |
- RMC-100 (Standard) VendorABB Affected before 2105457-037 Fixed in 2105457-037 Patch available CNA
- RMC-100-LITE VendorABB Affected before 2106229-011 Fixed in 2106229-011 Patch available CNA
- XIO VendorABB Affected before 2106198-008 Fixed in 2106198-008 Patch available CNA
- XFCG5 VendorABB Affected before 2105805-016 Fixed in 2105805-016 Patch available CNA
- XRCG5 VendorABB Affected before 2105864-016 Fixed in 2105864-016 Patch available CNA
- uFLOG5 VendorABB Affected before 2105298-024 Fixed in 2105298-024 Patch available CNA
- UDC VendorABB Affected before 2106177-007 Fixed in 2106177-007 Patch available CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:abb:rmc-100_firmware:*:*:*:*:*:*:*:* | before 2105457-037 | Vulnerable | ABB |
| cpe:2.3:h:abb:rmc-100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
| cpe:2.3:o:abb:rmc-100-lite_firmware:*:*:*:*:*:*:*:* | before 2106229-011 | Vulnerable | ABB |
| cpe:2.3:h:abb:rmc-100-lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
| cpe:2.3:o:abb:xio_firmware:*:*:*:*:*:*:*:* | before 2106198-008 | Vulnerable | ABB |
| cpe:2.3:h:abb:xio:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
| cpe:2.3:o:abb:xfcg5_firmware:*:*:*:*:*:*:*:* | before 2105805-016 | Vulnerable | ABB |
| cpe:2.3:h:abb:xfcg5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
| cpe:2.3:o:abb:xrcg5_firmware:*:*:*:*:*:*:*:* | before 2105864-016 | Vulnerable | ABB |
| cpe:2.3:h:abb:xrcg5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
- cpe:2.3:o:abb:rmc-100_firmware:*:*:*:*:*:*:*:* Versions before 2105457-037 Vulnerable ·ABB
- cpe:2.3:h:abb:rmc-100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
- cpe:2.3:o:abb:rmc-100-lite_firmware:*:*:*:*:*:*:*:* Versions before 2106229-011 Vulnerable ·ABB
- cpe:2.3:h:abb:rmc-100-lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
- cpe:2.3:o:abb:xio_firmware:*:*:*:*:*:*:*:* Versions before 2106198-008 Vulnerable ·ABB
- cpe:2.3:h:abb:xio:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
- cpe:2.3:o:abb:xfcg5_firmware:*:*:*:*:*:*:*:* Versions before 2105805-016 Vulnerable ·ABB
- cpe:2.3:h:abb:xfcg5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
- cpe:2.3:o:abb:xrcg5_firmware:*:*:*:*:*:*:*:* Versions before 2105864-016 Vulnerable ·ABB
- cpe:2.3:h:abb:xrcg5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:abb:uflog5_firmware:*:*:*:*:*:*:*:* | before 2105298-024 | Vulnerable | ABB |
| cpe:2.3:h:abb:uflog5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
| cpe:2.3:o:abb:udc_firmware:*:*:*:*:*:*:*:* | before 2106177-007 | Vulnerable | ABB |
| cpe:2.3:h:abb:udc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
- cpe:2.3:o:abb:uflog5_firmware:*:*:*:*:*:*:*:* Versions before 2105298-024 Vulnerable ·ABB
- cpe:2.3:h:abb:uflog5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
- cpe:2.3:o:abb:udc_firmware:*:*:*:*:*:*:*:* Versions before 2106177-007 Vulnerable ·ABB
- cpe:2.3:h:abb:udc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
Remediation
- Fix · CNA RMC-100 (Standard) (ABB) Fixed in 2105457-037
- Fix · CNA RMC-100-LITE (ABB) Fixed in 2106229-011
- Fix · CNA XIO (ABB) Fixed in 2106198-008
- Fix · CNA XFCG5 (ABB) Fixed in 2105805-016
- Fix · CNA XRCG5 (ABB) Fixed in 2105864-016
- Fix · CNA uFLOG5 (ABB) Fixed in 2105298-024
- Fix · CNA UDC (ABB) Fixed in 2106177-007
Timeline
- 2026-10-02 Threatist record created from CVE-2022-0902
- 2026-10-03 Alias added: GHSA-844m-rhr6-873v
References
Sources
- CVE-2022-0902 · CVE Program
- CVE-2022-0902 · NVD
- FIRST EPSS
- GHSA-844m-rhr6-873v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences