1. Home
  2. CVE Database
  3. CVE-2019-18995
MEDIUM · 4.3

CVE-2019-18995

The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via cr...

Vulnerability Description

The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
AbbPb610 Panel Builder 600<= 2.8.0.424

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2019-18995?

CVE-2019-18995 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via cr...

How severe is CVE-2019-18995?

CVE-2019-18995 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-18995?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Pb610 Panel Builder 600.