CVE-2019-18996 | BDVDB-2026-127996 Detail
ABBPB610 Panel Builder 600
Description#
Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact low. Attack vector: local.
Weaknesses#
- CWE-424 Improper Protection of Alternate Path
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.