ABB PB610 Panel Builder 600

🗓️ 27 Jun 2019 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 114 Views

ABB PB610 Panel Builder 600 with Use of Hard-coded Credentials, Improper Authentication, and Buffer Overflow Vulnerabilitie

Reporter	Title	Published	Views	Family All 78
BDU FSTEC	The vulnerability of ABB’s automation control panels and the PB610 Panel Builder 600 software, which allows a intruder to read and write configuration files of HMI devices or trigger a system restart.	8 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the /cgi/loginDefaultUser component of the CGI HTTP-server interface of the IDAL user interface design tool PB610 Panel Builder 600 (SAP500900R0101) allows a attacker to escalate their privileges.	8 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FTP server of the IDAL user interface design tool, PB610 Panel Builder 600 (SAP500900R0101), allows a perpetrator to gain unauthorized access to protected information and compromise its integrity.	8 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP-server of the IDAL user interface design tool PB610 Panel Builder 600 (SAP500900R0101) allows a attacker to execute arbitrary code or cause a failure in the HTTP-server’s operation.	8 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FTP server of the IDAL user interface design tool, PB610 Panel Builder 600 (SAP500900R0101), allows a hacker to execute arbitrary code or cause a failure in the FTP server’s operation.	8 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FTP server of the IDAL user interface design tool, PB610 Panel Builder 600 (SAP500900R0101), allows a hacker to trigger a denial-of-service attack.	8 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP-server of the IDAL user interface design tool PB610 Panel Builder 600 (SAP500900R0101) allows a attacker to execute arbitrary code.	8 Jul 201900:00	–	bdu_fstec
Circl	CVE-2019-7226	12 May 202013:27	–	circl
CNVD	ABB PB610 IDAL HTTP server buffer overflow vulnerability	26 Jun 201900:00	–	cnvd
CNVD	ABB PB610 IDAL HTTP server memory corruption vulnerability	26 Jun 201900:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-178-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-178-01
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-178-01
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
ics-cert	www.ics-cert.us-cert.gov/tips/ICS-TIP-12-146-01B

27 Jun 2019 00:00Current

9.2High risk

Vulners AI Score9.2

CVSS 25.8

CVSS 3.18.8

EPSS0.52093

abb pb610 panel builder 600 use of hard-coded credentials improper authentication buffer overflow vulnerabilities