PT-2024-5495 · Abb · Abb Mint Workbench

Published 2024-07-05 · Updated 2024-07-19 · CVE-2024-5402

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB Mint Workbench versions 5866 through 5868

Description A local attacker who successfully exploited this issue could gain elevated privileges by inserting an executable file in the path of the affected service. The issue is related to an unquoted search path or element vulnerability.

Recommendations For versions 5866 through 5868, update to version 5868 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected service to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

BDU:2024-06144

CVE-2024-5402

Affected Products

Abb Mint Workbench

References · 8

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5402 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-5402 · Security Note
• https://t.me/cvenotify/86786 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch · Note
• https://t.me/cvenotify/86205 · Telegram Post
• https://t.me/cvedetector/863 · Telegram Post