PT-2016-6002 · Abb · Abb Datamanagerpro

Andrea Micalizzi · Published 2016-09-19 · Updated 2016-11-28 · CVE-2016-4526

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB DataManagerPro versions 1.x before 1.7.1

Description The issue allows local users to gain privileges by replacing a DLL file in the package directory.

Recommendations For ABB DataManagerPro versions 1.x before 1.7.1, update to version 1.7.1 or later to resolve the issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2016-4526

Affected Products

Abb Datamanagerpro

References · 5

• https://library.e.abb.com/public/93e52dbfd6ab4f64aa435973ccf1b6e2/9ADB005557_ABB_SoftwareVulnerabilityHandlingAdvisory_DMPro.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4526 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4526 · Security Note
• http://securityfocus.com/bid/92980 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-259-02 · Note