ABB PB610 Panel Builder 600
An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected system node.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-7225US | high8.8OT erhöht | — | ||
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Pan… | ||||
| CVE-2019-7227US | high7.3 | — | ||
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download an… | ||||
| CVE-2019-7226US | high8.8 | — | ||
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/l… | ||||
| CVE-2019-7228US | high8.8 | — | ||
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will cra… | ||||
| CVE-2019-7231US | medium5.7 | — | ||
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authent… | ||||
| CVE-2019-7232US | high8.8 | — | ||
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured E… | ||||
| CVE-2019-7230US | high8.8 | — | ||
The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Send… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-19-178-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (7)
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
- MitigationPB610 Panel Builder 600 order code
ABB recommends users apply the update of the PB610 applications on CP600 control panels at the earliest convenience.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan