CVE-2019-18995

—

CVSS 3.1

5.3 medium

EPSS

2%p81

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.

Vendors: abb
Products: pb610 panel builder 600
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.