|CVSS SCORE||7.8, (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)|
The specific flaw exists within the e-Design installer. By creating a symbolic link, an attacker can abuse the installer to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
ABB has issued an update to correct this vulnerability. More details can be found at:
|CREDIT||Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative