CVE-2022-31217: Abb Automation Builder

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.

Affected products

• Abb Automation Builder: from 1.1.0, up to and including 2.5.0
• Abb Drive Composer: from 2.0, before 2.7.1 (fixed in 2.7.1)
• Abb Mint Workbench: up to and including 5866

Published 2022-06-15. Last modified 2026-06-17.