« Volver al listado

CVE-2014-5430

Estado: ModificadaMedia (6.9)—

Untrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer 1.5 allows local users to gain privileges via a Trojan horse DLL that is accessed as a result of incorrect DLL configuration by an optional installation program.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

ABB — RobotstudioABB — Test Signal Viewer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-5430",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-07T11:55:03.767",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-308-01",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-308-01",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Untrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer 1.5 allows local users to gain privileges via a Trojan horse DLL that is accessed as a result of incorrect DLL configuration by an optional installation program."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ruta de búsqueda no confiable en ABB RobotStudio 5.6x anterior a 5.61.02 y Test Signal Viewer 1.5 permite a usuarios locales ganar privilegios a través de un DLL tryano al que se accede como resultado de una configuración DLL incorrecta por un programa de instalación opcional."
    }
  ],
  "lastModified": "2026-06-17T00:11:32.747",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:abb:robotstudio:5.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58E1E1D8-8A19-49D1-9193-A50B51A62D7B"
            },
            {
              "criteria": "cpe:2.3:a:abb:robotstudio:5.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DD3D4F9-EC5C-4603-AEC7-02DF279D7B91"
            },
            {
              "criteria": "cpe:2.3:a:abb:robotstudio:5.61.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2F3F706-BC63-4C7E-82CC-8196BAF4F0DF"
            },
            {
              "criteria": "cpe:2.3:a:abb:test_signal_viewer:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BAEB0B80-6423-4FD4-8B2A-6332A6EFE752"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/427.html\"> CWE-427: Uncontrolled Search Path Element </a>",
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}