VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-18997

CVE-2019-18997

Description

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting unauthorized file access.

Affected products

3
  • Abb/Pb610 Panel Builder 6003 versions
    cpe:2.3:a:abb:pb610_panel_builder_600:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:abb:pb610_panel_builder_600:*:*:*:*:*:*:*:*range: <=2.8.0.424
    • (no CPE)range: <=2.8.0.424
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.