CVE-2019-18996
18.12.2019, 21:15
Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the applications context.Enginsight
| Vendor | Product | Version |
|---|---|---|
| abb | pb610_panel_builder_600 | 𝑥 ≤ 2.8.0.424 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-424 - Improper Protection of Alternate PathThe product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.
- CWE-426 - Untrusted Search PathThe application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.