Abb Mint Workbench vulnerabilities

CVE-2024-5402 [MEDIUM] CWE-428 CVE-2024-5402: Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who success Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service. This issue affects Mint Workbench I versions: from 5866 before 5868.

CVE-2022-31219 [HIGH] CWE-59 CVE-2022-31219: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.

CVE-2022-26057 [MEDIUM] CWE-269 CVE-2022-26057: Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation on the product

CVE-2022-31216 [HIGH] CWE-59 CVE-2022-31216: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.

CVE-2022-31217 [HIGH] CWE-59 CVE-2022-31217: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.

CVE-2022-31218 [HIGH] CWE-59 CVE-2022-31218: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product.