ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Link | Tags |
---|---|
https://library.e.abb.com/public/93e52dbfd6ab4f64aa435973ccf1b6e2/9ADB005557_ABB_SoftwareVulnerabilityHandlingAdvisory_DMPro.pdf | vendor advisory |
https://ics-cert.us-cert.gov/advisories/ICSA-16-259-02 | third party advisory us government resource |
http://www.securityfocus.com/bid/92980 | vdb entry |