Description
The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ICS-CERT | ABB CP400 Panel Builder TextEditor 2.0 | Versions 2.0.7.05 and earlier | — |
Advisories 1
- ICSA-19-017-02 ABB CP400 Panel Builder TextEditor 2.0 CISA ICS & IT advisories · Jan 17, 2019