Skip to content
OpenAdvisories

Product · ABB

PB610 Panel Builder 600

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2019-18997

    PB610 HMISimulator provides interface with access to arbitrary files

    The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working dire…

    ABB PB610 Panel Builder 600 ICS / OT
  • Medium 4.3
    CVE-2019-18995

    ABB PB610 HMISimulator does not check content-length of the HTTP request

    The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.

    ABB PB610 Panel Builder 600 ICS / OT