CVE-2019-18997: PB610 HMISimulator provides interface with access to arbitrary files
The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting unauthorized file access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18997?
CVE-2019-18997 has a medium severity rating due to the potential for unauthorized file access.
How do I fix CVE-2019-18997?
To mitigate CVE-2019-18997, upgrade ABB PB610 Panel Builder 600 to a version later than 2.8.0.424.
Which versions of ABB PB610 Panel Builder 600 are affected by CVE-2019-18997?
All versions of ABB PB610 Panel Builder 600 up to and including version 2.8.0.424 are affected by CVE-2019-18997.
What type of vulnerability is CVE-2019-18997?
CVE-2019-18997 is a directory traversal vulnerability that can allow access to files outside the intended directory.
Are there any known exploits for CVE-2019-18997?
As of now, there are no publicly known exploits specifically targeting CVE-2019-18997.