Vulnerabilities > ABB > Pb610 Panel Builder 600

DATE CVE VULNERABILITY TITLE RISK
2019-12-18 CVE-2019-18997 Unspecified vulnerability in ABB Pb610 Panel Builder 600 1.90.0.975/2.8.0.424
The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file.
network
low complexity
abb
7.5
2019-12-18 CVE-2019-18996 Untrusted Search Path vulnerability in ABB Pb610 Panel Builder 600 1.90.0.975/2.8.0.424
Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context.
local
low complexity
abb CWE-426
7.8
2019-12-18 CVE-2019-18995 Improper Input Validation vulnerability in ABB Pb610 Panel Builder 600 1.90.0.975/2.8.0.424
The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.
network
low complexity
abb CWE-20
5.3
2019-12-18 CVE-2019-18994 Improper Input Validation vulnerability in ABB Pb610 Panel Builder 600 1.90.0.975/2.8.0.424
Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file.
network
low complexity
abb CWE-20
6.5