Vulnerability Details : CVE-2019-19100

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.
Published 2020-04-29 03:15:17
Updated 2021-09-14 14:00:53
Source Asea Brown Boveri Ltd. (ABB)
View at NVD,   CVE.org
Vulnerability category: Gain privilege

Products affected by CVE-2019-19100

Exploit prediction scoring system (EPSS) score for CVE-2019-19100

EPSS FAQ
0.04%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 9 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-19100

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
3.6
 LOW AV:L/AC:L/Au:N/C:N/I:P/A:P
3.9
4.9
 NIST
7.5
 HIGH CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
1.1
5.8
 Asea Brown Boveri Ltd. (ABB)
7.1
 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
1.8
5.2
 NIST

CWE ids for CVE-2019-19100

  • Assigned by: cybersecurity@ch.abb.com (Secondary)

References for CVE-2019-19100

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close