CVE-2018-19008

The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution.

Score

CVSS 3.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-02-13

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Cp400pb Firmware (Abb)
• Abb Cp400 Panel Builder Texteditor 2.0 (Ics-cert)

References

• http://www.securityfocus.com/bid/106658
• https://ics-cert.us-cert.gov/advisories/ICSA-19-017-02