ABB PB610 Multiple Security Vulnerabilities
BID:108886
CVE-2019-7226 | CVE-2019-7227 | CVE-2019-7228 | CVE-2019-7230 | CVE-2019-7231 | CVE-2019-7232 |Info
ABB PB610 Multiple Security Vulnerabilities
| Bugtraq ID: | 108886 |
| Class: | Unknown |
| CVE: |
CVE-2019-7226 CVE-2019-7227 CVE-2019-7228 CVE-2019-7230 CVE-2019-7232 CVE-2019-7231 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2019 12:00AM |
| Updated: | Jun 13 2019 12:00AM |
| Credit: | Xen1thLabs. |
| Vulnerable: |
ABB PB610 Panel Builder 600 2.8.0.367 ABB PB610 Panel Builder 600 1.91 |
| Not Vulnerable: |
ABB PB610 Panel Builder 600 2.8.0.424 |
Discussion
ABB PB610 Multiple Security Vulnerabilities
ABB PB610 Panel Builder 600 is prone to the following vulnerabilities:
1. An authentication-bypass vulnerability
2. A directory-traversal vulnerability
3. Multiple memory corruption vulnerabilities
4. A stack-based buffer-overflow vulnerability
5. A buffer-overflow vulnerability
Attackers can exploit these issues to execute arbitrary code, access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory, bypass authentication mechanism and perform unauthorized actions. Failed exploit attempts will likely cause denial-of-service conditions.
ABB PB610 Panel Builder 600 version 1.91 through 2.8.0.367 are vulnerable.
ABB PB610 Panel Builder 600 is prone to the following vulnerabilities:
1. An authentication-bypass vulnerability
2. A directory-traversal vulnerability
3. Multiple memory corruption vulnerabilities
4. A stack-based buffer-overflow vulnerability
5. A buffer-overflow vulnerability
Attackers can exploit these issues to execute arbitrary code, access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory, bypass authentication mechanism and perform unauthorized actions. Failed exploit attempts will likely cause denial-of-service conditions.
ABB PB610 Panel Builder 600 version 1.91 through 2.8.0.367 are vulnerable.
Exploit / POC
ABB PB610 Multiple Security Vulnerabilities
Attackers can exploit these issues to execute arbitrary code, access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory, bypass authentication mechanism and perform unauthorized actions. Failed exploit attempts will likely cause denial-of-service conditions.
Attackers can exploit these issues to execute arbitrary code, access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory, bypass authentication mechanism and perform unauthorized actions. Failed exploit attempts will likely cause denial-of-service conditions.
Solution / Fix
ABB PB610 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
ABB PB610 Multiple Security Vulnerabilities
References:
References:
- ABB Homepage (ABB)
- Multiple Vulnerabilities in ABB PB610 (ABB)