PT-2019-15748 · Abb · Abb Pb610 Panel Builder 600

Published 2019-12-18 · Updated 2020-10-22 · CVE-2019-18997

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier

Description The issue concerns the HMISimulator component, which uses the readFile/writeFile interface. It potentially allows access to files outside of the working directory due to path configuration, thus supporting unauthorized file access.

Recommendations For versions 2.8.0.424 and earlier, consider restricting access to the readFile and writeFile interfaces in the HMISimulator component to minimize the risk of unauthorized file access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-424

Related Identifiers

CVE-2019-18997

Affected Products

Abb Pb610 Panel Builder 600

References · 3

• 🔥 http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch · Exploit
• https://osv.dev/vulnerability/CVE-2019-18997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18997 · Security Note