CVE-2019-7228
PoC ×3—CVSS 3.1
8.8 high
EPSS
4%p89
Published
()
Modified
Description
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
- Vendors
- abb
- Products
- pb610 panel builder 600 firmware
- Weakness
- CWE-134
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.