CVE-2019-18994 - ABB PB610 HMIStudio crashes after launching an empty *.JPR application file

Back Back to CVE browser

MEDIUM

ABB PB610 HMIStudio crashes after launching an empty *.JPR application file

Published Dec 18, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.60%

Description

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.

Affected products

Vendor ABB Product ABB PB610 Panel Builder 600 Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=2.8.0.424

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ABB

ABB PB610 Panel Builder 600

n/a

Version	Status	Constraints
unspecified	affected	<=2.8.0.424

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published Dec 18, 2019

Updated Aug 5, 2024

Reserved Nov 15, 2019

Link CVE-2019-18994

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18994

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-18994