PT-2016-5085 · Abb · Abb Panel Builder 800

Ivan Sanchez · Publicado 2016-03-18 · Atualizado 2016-03-21 · CVE-2016-2281

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB Panel Builder 800 version 5.1

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory due to an untrusted search path vulnerability.

Recommendations For ABB Panel Builder 800 version 5.1, consider restricting the execution of files from untrusted directories to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-2281

Produtos afetados

Abb Panel Builder 800

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSA-16-077-01 · Nota
• https://osv.dev/vulnerability/CVE-2016-2281 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2281 · Nota de Segurança