CVE-2018-19008

2019-01-1700:00:00

CWE-20

icscert

www.cve.org

EPSS

0.001

Percentile

40.9%

JSON

The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn’t properly prevent the insertion of specially crafted files which could allow arbitrary code execution.

CNA Affected

[
  {
    "product": "ABB CP400 Panel Builder TextEditor 2.0",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2.0.7.05 and earlier"
      }
    ]
  }
]

References

www.securityfocus.com/bid/106658

ics-cert.us-cert.gov/advisories/ICSA-19-017-02

EPSS

0.001

Percentile

40.9%

JSON

Related for CVELIST:CVE-2018-19008