CVE-2019-7228

Summary: CVE-2019-7228 is a memory corruption/format-string vulnerability in ABB IDAL HTTP server (used by ABB PB610 Panel Builder 600). The server mishandles format strings during authentication; examples show that using the username "%25s%25p%25x%25n" crashes the server and that "%08x.AAAA.%08x...

ABB IDAL HTTP Server Uncontrolled Format String

XL-19-012 - ABB IDAL HTTP Server Uncontrolled Format String Vulnerability ======================================================================== Identifiers ----------- XL-19-012 CVE-2019-7228 ABBVU-IAMF-1902007 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...