Protection And Control Ied Manager Pcm600
Monthly
Incorrect permission assignment in ABB Protection and Control IED Manager (PCM600) through version 2.14 leaves a critical application resource on the Windows engineering workstation protected by weak access controls, letting a local user read and alter protected PCM600 data with high impact to confidentiality, integrity, and availability. Exploitation requires the attacker to already have local access to the host running PCM600 - the vendor vector describes a local attack (AV:L) with high privileges required (PR:H) and high attack complexity (AC:H), while our independent assessment scores it as a low-complexity local issue requiring only low privileges (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), so a lower-privileged local account may be sufficient in practice. No public exploit code has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation; ABB published the vendor advisory (document 2NGA003170), and this is a genuine but low-urgency issue.
Path traversal in ABB Protection and Control IED Manager (PCM600) through version 2.14 allows a local, low-privileged attacker to overwrite or corrupt files on an engineering workstation by supplying a crafted project, configuration, or import file with manipulated pathnames. Exploitation requires the attacker to already have local access with at least low-privilege credentials (PR:L) and depends on user interaction (UI:R) - an engineer must open or import the malicious file - and impact is limited to integrity (C:N/I:H/A:N) with no confidentiality or availability effect, making this a moderate, contained risk rather than a critical priority. No public exploit code has been identified at time of analysis, and there is no confirmed active exploitation (CISA KEV) or EPSS score provided for this CVE.
Incorrect permission assignment in ABB Protection and Control IED Manager (PCM600) through version 2.14 leaves a critical application resource on the Windows engineering workstation protected by weak access controls, letting a local user read and alter protected PCM600 data with high impact to confidentiality, integrity, and availability. Exploitation requires the attacker to already have local access to the host running PCM600 - the vendor vector describes a local attack (AV:L) with high privileges required (PR:H) and high attack complexity (AC:H), while our independent assessment scores it as a low-complexity local issue requiring only low privileges (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), so a lower-privileged local account may be sufficient in practice. No public exploit code has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation; ABB published the vendor advisory (document 2NGA003170), and this is a genuine but low-urgency issue.
Path traversal in ABB Protection and Control IED Manager (PCM600) through version 2.14 allows a local, low-privileged attacker to overwrite or corrupt files on an engineering workstation by supplying a crafted project, configuration, or import file with manipulated pathnames. Exploitation requires the attacker to already have local access with at least low-privilege credentials (PR:L) and depends on user interaction (UI:R) - an engineer must open or import the malicious file - and impact is limited to integrity (C:N/I:H/A:N) with no confidentiality or availability effect, making this a moderate, contained risk rather than a critical priority. No public exploit code has been identified at time of analysis, and there is no confirmed active exploitation (CISA KEV) or EPSS score provided for this CVE.