Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Device_library_wizard | Abb | 6.0.0 (including) | 6.0.3.2 (including) |
| Device_library_wizard | Abb | 6.1.0 (including) | 6.1.0 (including) |
References
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA121681\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA121681\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch