CVE-2019-7231: Abb PB610 Panel Builder 600 Firmware

Medium severity, CVSS 5.7. EPSS: 6.8% chance of exploitation in the next 30 days.

The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that terminates the server.

Affected products

• Abb PB610 Panel Builder 600 Firmware: from 1.91, up to and including 2.8.0.367

Published 2019-06-24. Last modified 2026-06-17.