ABB PB610 Panel Builder 600 is prone to the following vulnerabilities:
1. An authentication-bypass vulnerability
2. A directory-traversal vulnerability
3. Multiple memory corruption vulnerabilities
4. A stack-based buffer-overflow vulnerability
5. A buffer-overflow vulnerability
Attackers can exploit these issues to execute arbitrary code, access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory, bypass authentication mechanism and perform unauthorized actions. Failed exploit attempts will likely cause denial-of-service conditions.
ABB PB610 Panel Builder 600 version 1.91 through 2.8.0.367 are vulnerable.
Information
CVE-2019-7227
CVE-2019-7228
CVE-2019-7230
CVE-2019-7232
CVE-2019-7231
ABB PB610 Panel Builder 600 1.91
Exploit
Attackers can exploit these issues to execute arbitrary code, access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory, bypass authentication mechanism and perform unauthorized actions. Failed exploit attempts will likely cause denial-of-service conditions.