CVE-2019-18996
ABB PB610 HMIStudio accepts malicious DLL file in an application
- State
- Published
- Severity
- 7.1 High
- Published
- Dec 18, 2019
- Updated
- Aug 5, 2024
- Reserved
- Nov 15, 2019
Description
Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.1 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L | ABB |
Weaknesses
- CWE-424 Improper Protection of Alternate Path
Affected Products
| Product | Versions |
|---|---|
PB610 Panel Builder 600ABB |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.