ABB PB610 Panel Builder 600
An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-7225US | high8.8OT elevated | — | ||
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Pan… | ||||
| CVE-2019-7227US | high7.3 | — | ||
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download an… | ||||
| CVE-2019-7226US | high8.8 | — | ||
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/l… | ||||
| CVE-2019-7228US | high8.8 | — | ||
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will cra… | ||||
| CVE-2019-7231US | medium5.7 | — | ||
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authent… | ||||
| CVE-2019-7232US | high8.8 | — | ||
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured E… | ||||
| CVE-2019-7230US | high8.8 | — | ||
The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Send… | ||||
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-19-178-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (7)
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan