ABB PB610 HMIStudio crashes after launching an empty *.JPR application file
Vulnerability Description
Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18994
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- NSFOCUS for providing vulnerability details and proof of concept.
