Stack-based buffer overflow in ABB products - CVE-2019-7232

Vulnerability details

The vulnerability allows an attacker to execute arbitrary code on the target server.

The vulnerability exists due to a boundary error when a large host header is sent in a HTTP request to the IDAL HTTP server. An unauthenticated attacker can submit a Host header value of 2047 bytes or more to overflow the buffer and overwrite the SEH address, which can then be leveraged to execute attacker-controlled code on the server.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2019-7232

External References

• https://search-ext.abb.com/library/Download.aspx?DocumentID=3ADR010377&LanguageCode=en&a...
• https://www.us-cert.gov/ics/advisories/icsa-19-178-01

Related Security Bulletins

• Multiple vulnerabilities in ABB PB610 Panel Builder 600