HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 Improper Input Validation Vulnerability

Summary

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file.

Credit:

The information has been provided by Vendor

The original article can be found at:http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch


Details

An attacker with access to the file system might be able to cause application malfunction such as denial of service.

 

Vulnerable Systems:

ABB PB610 Panel Builder 600 versions 2.8.0.424

 

CVE Information:

CVE-2019-18994

 

Disclosure Timeline:
Published Date:12/18/2019

Categories: FeaturedNews