Description
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | Drive Composer entry | 2.0 – < unspecified, unspecified – ≤ 2.7 | unspecified |
| ABB | Drive Composer pro | 2.0 – < unspecified, unspecified – ≤ 2.7 | unspecified |
| ABB | ABB Automation Builder | 1.1.0 – < unspecified, unspecified – ≤ 2.5.0 | unspecified |
| ABB | Mint WorkBench | build – ≤ 5866 | — |
Advisories 1
- ICSA-22-202-01 ABB Drive Composer, Automation Builder, Mint Workbench CISA ICS & IT advisories · Jul 21, 2022