1. Home
  2. CVE Database
  3. CVE-2019-18996
HIGH · 7.1

CVE-2019-18996

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the loc...

Vulnerability Description

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
AbbPb610 Panel Builder 600<= 2.8.0.424

Related Weaknesses (CWE)

CWE-426CWE-424

References

FAQ

What is CVE-2019-18996?

CVE-2019-18996 is a vulnerability with a CVSS score of 7.1 (HIGH). Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the loc...

How severe is CVE-2019-18996?

CVE-2019-18996 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-18996?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Pb610 Panel Builder 600.