Summary
An attacker could exploit the vulnerability by tricking a user to open a specially crafted file, allowing the attacker to insert and run arbitrary code. This vulnerability requires user interaction, and the exploit is only triggered when a local user runs the affected product and loads the specially crafted file.
Vulnerabilities 1
-
Unscored —
ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert…
Revision history
-
#1
ICSA-18-198-01 ABB Panel Builder 800
References
-
ICS Advisory ICSA-18-198-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-198-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B