PT-2014-6470 · Abb · Abb Test Signal Viewer+1

Published 2014-11-07 · Updated 2014-11-07 · CVE-2014-5430

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ABB RobotStudio versions 5.6x through 5.61.01 ABB Test Signal Viewer version 1.5

Description The issue allows local users to gain privileges via a Trojan horse DLL due to an untrusted search path vulnerability. This occurs as a result of incorrect DLL configuration by an optional installation program.

Recommendations For ABB RobotStudio versions 5.6x through 5.61.01, update to version 5.61.02 or later. For ABB Test Signal Viewer version 1.5, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-5430

Affected Products

Abb Robotstudio

Abb Test Signal Viewer

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-5430 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-14-308-01 · Note