CVE-2024-5402CWE-428

Mint Workbench I Unquoted Service Path Enumeration

Medium · published July 15, 2024

CVSS v4.0
6.2
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

Unquoted Search Path or Element vulnerability in ABB Mint Workbench.

A local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service.

This issue affects Mint Workbench I versions: from 5866 before 5868.

The record
Technical detail
CVSS v4.0
6.2 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:L/SI:H/SA:H/S:N/AU:Y/R:U/V:C/RE:L
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2024-07-15T11:57Z
EPSS history
Timeline
  • 15 JUL 11:57Z
    Mint Workbench I Unquoted Service Path Enumeration
    cvelistv5