PT-2019-9700
CVE-2018-19008
·
Published
2019-02-13
·
Updated
2019-10-09
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ABB CP400 Panel Builder versions 2.0.7.05 and earlier
Description
The issue concerns a vulnerability in the file parser of the TextEditor 2.0, where the application fails to properly prevent the insertion of specially crafted files. This could potentially allow arbitrary code execution.
Recommendations
For ABB CP400 Panel Builder versions 2.0.7.05 and earlier, consider disabling the TextEditor 2.0 until a patch is available to prevent the insertion of specially crafted files.
Found an issue in the description? Have something to add? Feel free to write us 👾