CVE-2019-18994CWE-20

ABB PB610 HMIStudio crashes after launching an empty *.JPR application file

Low · published December 18, 2019

CVSS v3.1
3.9
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-12-18T20:20Z
EPSS history
Timeline
  • 18 DEC 20:20Z
    ABB PB610 HMIStudio crashes after launching an empty *.JPR application file
    cvelistv5