VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-18995

CVE-2019-18995

Description

The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.

Affected products

3
  • Abb/Pb610 Panel Builder 6003 versions
    cpe:2.3:a:abb:pb610_panel_builder_600:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:abb:pb610_panel_builder_600:*:*:*:*:*:*:*:*range: <=2.8.0.424
    • (no CPE)range: <=2.8.0.424
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.