Skip to content
OpenAdvisories
High ICSA-19-178-01 7 CVEs

ABB PB610 Panel Builder 600

Published Jun 27, 2019 · Updated Jun 27, 2019

Vendor: ABB Product: PB610 Panel Builder 600 order code

Summary

An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.

Vulnerabilities 7

  • Unscored —
    CVE-2019-7225

    The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI …

  • Unscored —
    CVE-2019-7226

    The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication …

  • Unscored —
    CVE-2019-7227

    In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD …

  • Unscored —
    CVE-2019-7228

    The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attemptin…

  • Unscored —
    CVE-2019-7230

    The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authen…

  • Unscored —
    CVE-2019-7231

    The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. Thi…

  • Unscored —
    CVE-2019-7232 EPSS 52%

    The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host …

Revision history

  1. #1

    ICSA-19-178-01 ABB PB610 Panel Builder 600

References