PT-2016-6002 · Abb · Abb Datamanagerpro

Andrea Micalizzi · Publicado 2016-09-19 · Atualizado 2016-11-28 · CVE-2016-4526

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB DataManagerPro versions 1.x before 1.7.1

Description The issue allows local users to gain privileges by replacing a DLL file in the package directory.

Recommendations For ABB DataManagerPro versions 1.x before 1.7.1, update to version 1.7.1 or later to resolve the issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2016-4526

Produtos afetados

Abb Datamanagerpro

Referências · 5

• https://library.e.abb.com/public/93e52dbfd6ab4f64aa435973ccf1b6e2/9ADB005557_ABB_SoftwareVulnerabilityHandlingAdvisory_DMPro.pdf · Aviso do Fabricante
• http://securityfocus.com/bid/92980 · Nota
• https://osv.dev/vulnerability/CVE-2016-4526 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4526 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-259-02 · Nota