PT-2019-15748 · Abb · Abb Pb610 Panel Builder 600

Publicado 2019-12-18 · Atualizado 2020-10-22 · CVE-2019-18997

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier

Description The issue concerns the HMISimulator component, which uses the readFile/writeFile interface. It potentially allows access to files outside of the working directory due to path configuration, thus supporting unauthorized file access.

Recommendations For versions 2.8.0.424 and earlier, consider restricting access to the readFile and writeFile interfaces in the HMISimulator component to minimize the risk of unauthorized file access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-424

Identificadores relacionados

CVE-2019-18997

Produtos afetados

Abb Pb610 Panel Builder 600

Referências · 3

• 🔥 http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch · Exploit
• https://osv.dev/vulnerability/CVE-2019-18997 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18997 · Nota de Segurança