CVE:CVE-2014-5430
CNNVD:CNNVD-201411-106
ABB RobotStudio和Test Signal Viewer都是瑞士ABB公司的产品。RobotStudio是一套机器人离线编程和模拟软件。Test Signal Viewer是一款软件通知器。
ABB RobotStudio 5.61.02之前5.6x版本和Test Signal Viewer 1.5版本中存在不可信搜索路径漏洞。本地攻击者可借助Trojan horse DLL利用该漏洞获取权限。
solution:Upgrade abb robotstudio to a higher version than 5.60,5.61,5.61.01,and avoid the version 5.60,5.61,5.61.01; Upgrade abb test_signal_viewer to a higher version than 1.5,and avoid the version 1.5