CVE-2018-19008

Published: Feb 13, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution.

Affected (1)

Products: Abb: Cp400pb Firmware

1 product

Cp400pb Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Cp400pb Firmware	Up to 2.0.7.05

Running on/with	Platform Versions
Abb Cp400pb	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securityfocus.com/bid/106658

Source: ics-cert@hq.dhs.gov

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-017-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/106658

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-19-017-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.