{"id":"CVE-2024-5402","state":"PUBLISHED","title":"Mint Workbench I Unquoted Service Path Enumeration","description":"Unquoted Search Path or Element vulnerability in ABB Mint Workbench.\n\n\n\nA local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service.\n\n\nThis issue affects Mint Workbench I versions: from 5866 before 5868.","publishedAt":"2024-07-15T11:57:44.261Z","updatedAt":"2024-08-01T21:11:12.639Z","severity":{"score":6.2,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:L/SI:H/SA:H/S:N/AU:Y/R:U/V:C/RE:L","source":"ABB"},"assigner":"ABB","products":["ABB Mint Workbench I"],"affected":[{"vendor":"ABB","product":"Mint Workbench I","defaultStatus":"unaffected","versions":[{"version":"5866","status":"affected","lessThan":"5868","versionType":"custom"}],"platforms":["Windows"]}],"references":["https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/5xxx/CVE-2024-5402.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-5402","state":"PUBLISHED","datePublished":"2024-07-15T11:57:44.261Z","dateUpdated":"2024-08-01T21:11:12.639Z","assignerShortName":"ABB","assignerOrgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateReserved":"2024-05-27T06:28:25.877Z"},"containers":{"cna":{"title":"Mint Workbench I Unquoted Service Path Enumeration","descriptions":[{"lang":"en","value":"Unquoted Search Path or Element vulnerability in ABB Mint Workbench.\n\n\n\nA local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service.\n\n\nThis issue affects Mint Workbench I versions: from 5866 before 5868."}],"affected":[{"vendor":"ABB","product":"Mint Workbench I","defaultStatus":"unaffected","versions":[{"version":"5866","status":"affected","lessThan":"5868","versionType":"custom"}],"platforms":["Windows"]}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch"}],"metrics":[{"cvssV4_0":{"Automatable":"YES","Recovery":"USER","Safety":"NEGLIGIBLE","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.2,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"CONCENTRATED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:L/SI:H/SA:H/S:N/AU:Y/R:U/V:C/RE:L","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"LOW"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","description":"CWE-428 Unquoted Search Path or Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ABB","orgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateUpdated":"2024-07-15T11:57:44.261Z"},"credits":[{"lang":"en","type":"finder","value":"ABB thanks Yoav Yehudai of Novartis for working with ABB in effort to protect our customers."}],"datePublic":"2024-07-15T04:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"abb","product":"mint_workbench","defaultStatus":"unknown","versions":[{"version":"5866","status":"affected","lessThan":"5868","versionType":"custom"}],"cpes":["cpe:2.3:a:abb:mint_workbench:5866:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-15T13:08:32.219434Z","id":"CVE-2024-5402","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-15T13:10:14.877Z"}},{"title":"CVE Program Container","references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T21:11:12.639Z"}}]}}}