CVE-2022-1607: Abb Infinity DC Power Plant

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.

Affected products

• Abb Infinity DC Power Plant: before 5.0.0 (fixed in 5.0.0)
• Abb NE843 S: before 5.0.0 (fixed in 5.0.0)

Published 2023-02-24. Last modified 2026-06-17.