Pb610 Panel Builder 600 vulnerabilitiesRanked by how likely they are to be used.
Pb610 Panel Builder 600 is made by Abb. We track 10 published vulnerabilities listed under that exact name, across 2 versions. None of them is on the list of flaws known to be exploited today. Abb lists newer releases under their own names, such as Pb610 Panel Builder 600 Firmware, so check those pages too.
We keep watching the known-exploited list.
Is Pb610 Panel Builder 600 listed under other names? Yes.
Abb also lists Pb610 Panel Builder 600 under more specific names, such as Pb610 Panel Builder 600 Firmware. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which Pb610 Panel Builder 600 vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Pb610 Panel Builder 600's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Pb610 Panel Builder 600 flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 52%CVE-2019-7232High
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request.
- 8.5%CVE-2019-7227High
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files.
- 6.7%CVE-2019-7231Medium
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker.
- 5.3%CVE-2019-7226High
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions.
- 3.7%CVE-2019-7228High
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process.
- 3.7%CVE-2019-7230High
The ABB IDAL FTP server mishandles format strings in a username during the authentication process.
- 2.1%CVE-2019-18995Medium
The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP...
- 1.5%CVE-2019-18997High
The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file.
- 0.6%CVE-2019-18994Medium
Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file.
- 0.4%CVE-2019-18996High
Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system...
Running Pb610 Panel Builder 600? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured Exception Handler (SEH) address. An unauthenticated attacker can submit a Host header value of 2047 bytes or more to overflow the buffer and overwrite the SEH address, which can then be leveraged to execute attacker-controlled code on the server.
- Matched to
- Pb610 Panel Builder 600 on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 10 published vulnerabilities listed under the name Pb610 Panel Builder 600, across 2 versions.
None of Pb610 Panel Builder 600's vulnerabilities is on the list of flaws known to be exploited today.
Abb also lists Pb610 Panel Builder 600 under more specific names, such as Pb610 Panel Builder 600 Firmware. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Pb610 Panel Builder 600. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.