KLA10777 Code execution vulnerability in ABB Panel Builder 800

An unspecified vulnerability was found in ABB Panel Builder 800. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a DLL hijack.

Technical details

This vulnerability can be mitigated via disabling .pba files associations. For further instructions look at original advisory listed below.

Original advisories

ABB bulletin

Related products

Panel-Builder-800

CVE list

CVE-2016-2281 high

Solution

Update to the latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• ABB Panel Builder 800 versions earlier than 6.0