ByteOS Network

CVE Vulnerability Details :

CVE-2019-18996

PUBLISHED

More Info Official Page

Assigner-ABB

Assigner Org ID-2b718523-d88f-4f37-9bbd-300c20644bf9

Published At-18 Dec, 2019 | 20:24

Updated At-05 Aug, 2024 | 02:02

▼CVE Numbering Authority (CNA)

ABB PB610 HMIStudio accepts malicious DLL file in an application

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.

Affected Products

Vendor

ABB

Product

PB610 Panel Builder 600

Versions

Affected

From unspecified through 2.8.0.424 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-424	CWE-424 Improper Protection of Alternate Path

Metrics

Version	Base score	Base severity	Vector
3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L

Credits

NSFOCUS for providing vulnerability details and proof of concept.

References

Hyperlink	Resource
http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch	x_refsource_MISC x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References