CVE-2019-7228: High severity abb pb610 panel builder 600 firmware vulnerability
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7228?
CVE-2019-7228 is classified as a high-severity vulnerability due to its potential to crash the server and disclose sensitive stack memory contents.
How do I fix CVE-2019-7228?
To mitigate CVE-2019-7228, ensure you upgrade the ABB PB610 Panel Builder 600 firmware to version 2.8.0.367 or later.
What are the effects of exploiting CVE-2019-7228?
Exploiting CVE-2019-7228 can result in a denial of service by crashing the server and may also leak sensitive information from memory.
Which software versions are affected by CVE-2019-7228?
CVE-2019-7228 affects ABB IDAL HTTP server versions prior to 2.8.0.367.
What kind of attack vector does CVE-2019-7228 represent?
CVE-2019-7228 represents a format string vulnerability that can be exploited during the authentication process.