CVE-2019-18996

ABB PB610 Panel Builder 600’s HMIStudio component (versions ≤ 2.8.0.424) is affected by a DLL-loading vulnerability: path settings accept DLLs outside the program directory, potentially allowing a local attacker to execute code in the application's context. This is reported across multiple source...

CVE-2019-18997

ABB PB610 Panel Builder 600's HMISimulator component exposes a path traversal vulnerability. In PB610 HMISimulator versions 2.8.0.424 and earlier, the readFile/writeFile interface can manipulate the work file in a way that may allow access to files outside the working directory, enabling unauthor...

CVE-2019-18994

CVE-2019-18994 affects ABB PB610 Panel Builder 600 HMIStudio component. The vulnerability arises from a lack of file length checks, causing crashes when loading an empty *.JPR application file in versions 2.8.0.424 and earlier. Impact described: application malfunction/denial of service if an att...

CVE-2019-18995

The CVE-2019-18995 issue affects ABB PB610 Panel Builder 600 HMISimulator component, specifically versions 2.8.0.424 and earlier. The root cause is that the HMISimulator fails to validate the HTTP Content-Length header, allowing crafted HTTP requests to trigger a denial-of-service condition. Mult...