Pb610 Panel Builder 600 Security Vulnerabilities and Issues — Pb610 Panel Builder 600 CVE List

Lucene search

AbbPb610 Panel Builder 600

4 matches found

CVE•added 2019/12/18 9:15 p.m.•49 views

CVE-2019-18996

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.

7.8CVSS7.2AI score0.0014EPSS

CVE•added 2019/12/18 9:15 p.m.•48 views

CVE-2019-18997

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting unaut...

7.5CVSS5.7AI score0.00402EPSS

CVE•added 2019/12/18 9:15 p.m.•45 views

CVE-2019-18994

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.

6.5CVSS5.2AI score0.003EPSS

CVE•added 2019/12/18 9:15 p.m.•42 views

CVE-2019-18995

The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.

5.3CVSS4.8AI score0.00876EPSS