Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-18996

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.

Published

2019-12-18T21:15:13.507

Last Modified

2024-11-21T04:33:57.740

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.4

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-424
  • Type: Primary
    CWE-426
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application abb pb610_panel_builder_600 ≤ 2.8.0.424 Yes
References