Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-18996

Опубликовано: 18 дек. 2019
Источник: nvd
CVSS3: 7.1
CVSS3: 7.8
CVSS2: 4.4
EPSS Низкий

Описание

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:abb:pb610_panel_builder_600:*:*:*:*:*:*:*:*
Версия до 2.8.0.424 (включая)

EPSS

Процентиль: 29%
0.00107
Низкий

7.1 High

CVSS3

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-424
CWE-426

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application�s context.

EPSS

Процентиль: 29%
0.00107
Низкий

7.1 High

CVSS3

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-424
CWE-426