Read the docs
TI-2024-05018 Aliases CVE-2024-5402GHSA-5g78-6prg-fx59

Mint Workbench I Unquoted Service Path Enumeration

Priority LOW 29CWE-428Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
None · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-428.

Summary

Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service. This issue affects Mint Workbench I versions: from 5866 before 5868.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0018 7th percentileScored 2026-11-07
Fix Fixed Mint Workbench I (ABB): 5868

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBMint Workbench I5866 to before 58685868Patch availableCNA
  • Mint Workbench I VendorABB Affected 5866 to before 5868 Fixed in 5868 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:abb:mint_workbench:*:*:*:*:*:*:*:*5866 – 5868VulnerableABB
  • cpe:2.3:a:abb:mint_workbench:*:*:*:*:*:*:*:* Versions 5866 – 5868 Vulnerable ·ABB

Remediation

  • Fix · CNA Mint Workbench I (ABB) Fixed in 5868

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-5402
  2. 2026-10-03 Alias added: GHSA-5g78-6prg-fx59

References

Advisory 1

  • TI-2022-13258 Drive Composer Link Following Local Privilege Escalation Vulnerability CVSS 3.1HIGH 7.8
  • TI-2022-13257 Drive Composer Link Following Local Privilege Escalation Vulnerability CVSS 3.1HIGH 7.8
  • TI-2022-13256 Drive Composer Link Following Local Privilege Escalation Vulnerability CVSS 3.1HIGH 7.8
  • TI-2022-13255 Drive Composer Link Following Local Privilege Escalation Vulnerability CVSS 3.1HIGH 7.8
  • TI-2022-09530 Mint WorkBench Link Following Local Privilege Escalation Vulnerability CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences