Details of VAR-201807-0341

ID

VAR-201807-0341

CVE

CVE-2018-10616

TITLE

ABB Panel Builder 800 Input validation vulnerability

Trust: 1.4

sources: IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // CNVD: CNVD-2018-18146 // CNNVD: CNNVD-201807-1323

DESCRIPTION

ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert and run arbitrary code on a computer where the affected product is used. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of the IpAddress parameters of the ABB BeMMS OPC Driver. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of an administrator. ABB Panel Builder 800 is a web-based HMI (Human Machine Interface) system from ABB, Switzerland. Failed exploit attempts will result in denial-of-service conditions

Trust: 10.8

sources: NVD: CVE-2018-10616 // ZDI: ZDI-18-907 // ZDI: ZDI-18-886 // ZDI: ZDI-18-893 // ZDI: ZDI-18-903 // ZDI: ZDI-18-883 // ZDI: ZDI-18-887 // ZDI: ZDI-18-897 // ZDI: ZDI-18-896 // ZDI: ZDI-18-906 // ZDI: ZDI-18-900 // ZDI: ZDI-18-892 // ZDI: ZDI-18-912 // ZDI: ZDI-18-910 // ZDI: ZDI-18-889 // CNVD: CNVD-2018-18146 // BID: 104882 // IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // VULHUB: VHN-120393

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // CNVD: CNVD-2018-18146

AFFECTED PRODUCTS

vendor:	abb	model:	panel builder 800	scope:	-	version:	-	Trust: 9.8
vendor:	abb	model:	panel builder 800	scope:	eq	version:	-	Trust: 1.6
vendor:	abb	model:	panel builder	scope:	eq	version:	800	Trust: 0.6
vendor:	abb	model:	panel builder	scope:	eq	version:	8000	Trust: 0.3
vendor:	panel builder 800	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // ZDI: ZDI-18-897 // ZDI: ZDI-18-889 // ZDI: ZDI-18-910 // ZDI: ZDI-18-912 // ZDI: ZDI-18-892 // ZDI: ZDI-18-900 // ZDI: ZDI-18-906 // ZDI: ZDI-18-907 // ZDI: ZDI-18-896 // ZDI: ZDI-18-887 // ZDI: ZDI-18-883 // ZDI: ZDI-18-903 // ZDI: ZDI-18-893 // ZDI: ZDI-18-886 // CNVD: CNVD-2018-18146 // BID: 104882 // CNNVD: CNNVD-201807-1323 // NVD: CVE-2018-10616

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2018-10616
value:	MEDIUM
Trust: 5.6
ZDI:	CVE-2018-10616
value:	HIGH
Trust: 4.2
nvd@nist.gov:	CVE-2018-10616
value:	HIGH
Trust: 1.0
CNVD:	CNVD-2018-18146
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201807-1323
value:	HIGH
Trust: 0.6
IVD:	e2f971a1-39ab-11e9-bb19-000c29342cb1
value:	HIGH
Trust: 0.2
VULHUB:	VHN-120393
value:	HIGH
Trust: 0.1

ZDI:	CVE-2018-10616
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 5.6
nvd@nist.gov:	CVE-2018-10616
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 5.2
CNVD:	CNVD-2018-18146
severity:	MEDIUM
baseScore:	6.2
vectorString:	AV:L/AC:H/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	1.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	e2f971a1-39ab-11e9-bb19-000c29342cb1
severity:	MEDIUM
baseScore:	6.2
vectorString:	AV:L/AC:H/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	1.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-120393
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-10616
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.0

sources: IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // ZDI: ZDI-18-897 // ZDI: ZDI-18-889 // ZDI: ZDI-18-910 // ZDI: ZDI-18-912 // ZDI: ZDI-18-892 // ZDI: ZDI-18-900 // ZDI: ZDI-18-906 // ZDI: ZDI-18-907 // ZDI: ZDI-18-896 // ZDI: ZDI-18-887 // ZDI: ZDI-18-883 // ZDI: ZDI-18-903 // ZDI: ZDI-18-893 // ZDI: ZDI-18-886 // CNVD: CNVD-2018-18146 // VULHUB: VHN-120393 // CNNVD: CNNVD-201807-1323 // NVD: CVE-2018-10616

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.1

sources: VULHUB: VHN-120393 // NVD: CVE-2018-10616

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201807-1323

TYPE

Input validation error

Trust: 1.1

sources: IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // BID: 104882 // CNNVD: CNNVD-201807-1323

PATCH

title:

ABB has issued an update to correct this vulnerability.

url:

https://library.e.abb.com/public/30b77e0dc904475295401b66ec74cd3c/3BSE092089_A_en_SECURITY_-_Panel_Builder_800_Improper_input_validation_vulnerability.pdf?x-sign=OyK2T7i661JL8oQxBk+0/iWUV+hinpu8Nt6nvVmhw581vp4nkzkQbe1JSiJQPtp0

Trust: 9.8

sources: ZDI: ZDI-18-897 // ZDI: ZDI-18-889 // ZDI: ZDI-18-910 // ZDI: ZDI-18-912 // ZDI: ZDI-18-892 // ZDI: ZDI-18-900 // ZDI: ZDI-18-906 // ZDI: ZDI-18-907 // ZDI: ZDI-18-896 // ZDI: ZDI-18-887 // ZDI: ZDI-18-883 // ZDI: ZDI-18-903 // ZDI: ZDI-18-893 // ZDI: ZDI-18-886

EXTERNAL IDS

db:	NVD	id:	CVE-2018-10616	Trust: 12.6
db:	ICS CERT	id:	ICSA-18-198-01	Trust: 2.6
db:	BID	id:	104882	Trust: 2.0
db:	CNNVD	id:	CNNVD-201807-1323	Trust: 0.9
db:	CNVD	id:	CNVD-2018-18146	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-6143	Trust: 0.7
db:	ZDI	id:	ZDI-18-897	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6085	Trust: 0.7
db:	ZDI	id:	ZDI-18-889	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6422	Trust: 0.7
db:	ZDI	id:	ZDI-18-910	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6423	Trust: 0.7
db:	ZDI	id:	ZDI-18-912	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6096	Trust: 0.7
db:	ZDI	id:	ZDI-18-892	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6140	Trust: 0.7
db:	ZDI	id:	ZDI-18-900	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6348	Trust: 0.7
db:	ZDI	id:	ZDI-18-906	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6349	Trust: 0.7
db:	ZDI	id:	ZDI-18-907	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6142	Trust: 0.7
db:	ZDI	id:	ZDI-18-896	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6083	Trust: 0.7
db:	ZDI	id:	ZDI-18-887	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-5976	Trust: 0.7
db:	ZDI	id:	ZDI-18-883	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6228	Trust: 0.7
db:	ZDI	id:	ZDI-18-903	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6098	Trust: 0.7
db:	ZDI	id:	ZDI-18-893	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-6061	Trust: 0.7
db:	ZDI	id:	ZDI-18-886	Trust: 0.7
db:	IVD	id:	E2F971A1-39AB-11E9-BB19-000C29342CB1	Trust: 0.2
db:	SEEBUG	id:	SSVID-98932	Trust: 0.1
db:	VULHUB	id:	VHN-120393	Trust: 0.1

sources: IVD: e2f971a1-39ab-11e9-bb19-000c29342cb1 // ZDI: ZDI-18-897 // ZDI: ZDI-18-889 // ZDI: ZDI-18-910 // ZDI: ZDI-18-912 // ZDI: ZDI-18-892 // ZDI: ZDI-18-900 // ZDI: ZDI-18-906 // ZDI: ZDI-18-907 // ZDI: ZDI-18-896 // ZDI: ZDI-18-887 // ZDI: ZDI-18-883 // ZDI: ZDI-18-903 // ZDI: ZDI-18-893 // ZDI: ZDI-18-886 // CNVD: CNVD-2018-18146 // VULHUB: VHN-120393 // BID: 104882 // CNNVD: CNNVD-201807-1323 // NVD: CVE-2018-10616

REFERENCES

url:	https://library.e.abb.com/public/30b77e0dc904475295401b66ec74cd3c/3bse092089_a_en_security_-_panel_builder_800_improper_input_validation_vulnerability.pdf?x-sign=oyk2t7i661jl8oqxbk+0/iwuv+hinpu8nt6nvvmhw581vp4nkzkqbe1jsijqptp0	Trust: 9.8
url:	https://ics-cert.us-cert.gov/advisories/icsa-18-198-01	Trust: 2.6
url:	http://www.securityfocus.com/bid/104882	Trust: 1.7
url:	http://search-ext.abb.com/library/download.aspx?documentid=3bse092089&action=launch	Trust: 1.6
url:	http://search-ext.abb.com/library/download.aspx?documentid=3bse092089&action=launch	Trust: 0.7
url:	http://www.abb.com/	Trust: 0.3

CREDITS

Michael DePlante - Leahy Center for Digital Investigation at Champlain College

Trust: 7.0

sources: ZDI: ZDI-18-897 // ZDI: ZDI-18-910 // ZDI: ZDI-18-912 // ZDI: ZDI-18-900 // ZDI: ZDI-18-906 // ZDI: ZDI-18-907 // ZDI: ZDI-18-896 // ZDI: ZDI-18-883 // ZDI: ZDI-18-903 // ZDI: ZDI-18-893

SOURCES

db:	IVD	id:	e2f971a1-39ab-11e9-bb19-000c29342cb1
db:	ZDI	id:	ZDI-18-897
db:	ZDI	id:	ZDI-18-889
db:	ZDI	id:	ZDI-18-910
db:	ZDI	id:	ZDI-18-912
db:	ZDI	id:	ZDI-18-892
db:	ZDI	id:	ZDI-18-900
db:	ZDI	id:	ZDI-18-906
db:	ZDI	id:	ZDI-18-907
db:	ZDI	id:	ZDI-18-896
db:	ZDI	id:	ZDI-18-887
db:	ZDI	id:	ZDI-18-883
db:	ZDI	id:	ZDI-18-903
db:	ZDI	id:	ZDI-18-893
db:	ZDI	id:	ZDI-18-886
db:	CNVD	id:	CNVD-2018-18146
db:	VULHUB	id:	VHN-120393
db:	BID	id:	104882
db:	CNNVD	id:	CNNVD-201807-1323
db:	NVD	id:	CVE-2018-10616

LAST UPDATE DATE

2024-09-15T23:15:41.257000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-18-897	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-889	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-910	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-912	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-892	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-900	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-906	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-907	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-896	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-887	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-883	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-903	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-893	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-886	date:	2018-08-10T00:00:00
db:	CNVD	id:	CNVD-2018-18146	date:	2018-09-10T00:00:00
db:	VULHUB	id:	VHN-120393	date:	2019-10-09T00:00:00
db:	BID	id:	104882	date:	2018-07-17T00:00:00
db:	CNNVD	id:	CNNVD-201807-1323	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-10616	date:	2019-10-09T23:32:55.650

SOURCES RELEASE DATE

db:	IVD	id:	e2f971a1-39ab-11e9-bb19-000c29342cb1	date:	2018-09-10T00:00:00
db:	ZDI	id:	ZDI-18-897	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-889	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-910	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-912	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-892	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-900	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-906	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-907	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-896	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-887	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-883	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-903	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-893	date:	2018-08-10T00:00:00
db:	ZDI	id:	ZDI-18-886	date:	2018-08-10T00:00:00
db:	CNVD	id:	CNVD-2018-18146	date:	2018-09-10T00:00:00
db:	VULHUB	id:	VHN-120393	date:	2018-07-18T00:00:00
db:	BID	id:	104882	date:	2018-07-17T00:00:00
db:	CNNVD	id:	CNNVD-201807-1323	date:	2018-07-19T00:00:00
db:	NVD	id:	CVE-2018-10616	date:	2018-07-18T15:29:00.220