OTPulse

Mint Workbench I Path traversal Vulnerability

MonitorCVSS 7.59akk108473a3188Sep 22, 2026
ABB
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Mint Workbench I version 5876 and earlier contain a path traversal vulnerability in the MWI http service that allows a local attacker with file write access to read arbitrary system files. This could expose sensitive data, engineering credentials, or process configurations. The vulnerability requires local machine access and write permissions to exploit. ABB states the product is at end-of-life (globally by end of 2026, in China by end of 2027) and will not release patches. Only workarounds and compensating controls are available.

What this means
What could happen
An attacker with local machine access and file write permissions could read sensitive system files through path traversal, exposing confidential data stored on the workbench. This could compromise engineering credentials, process configurations, or other sensitive plant information.
Who's at risk
Engineering and control system operators using ABB Mint Workbench I for industrial automation, process control, or power system engineering. This affects workstations and engineering stations in utilities, water authorities, manufacturing plants, and other facilities using ABB automation software.
How it could be exploited
An attacker with local access to a machine running Mint Workbench I could craft a malicious file write request using path traversal (../ sequences) to read arbitrary system files outside the intended directory. The attacker must already have local file write access on the machine to exploit this vulnerability.
Prerequisites
  • Local access to the machine running Mint Workbench I
  • File write access in the MWI http service directory or related paths
  • Service MWI http enabled and accessible
No patch available (product at end-of-life)Affects workbench systems used for plant configuration and engineeringLocal access required but file write access is a low barrier on many machines
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (1)
ProductAffected VersionsFix Status
Mint Workbench I <=5876≤ 5876No fix yet
Remediation & Mitigation
0/4
Do now
0/3
WORKAROUNDDisable Service MWI http when not in active use
HARDENINGRestrict physical machine access to authorized personnel only
HARDENINGEnable User Account Control (UAC) to block unauthorized privilege escalation attempts
Long-term hardening
0/1
HARDENINGAvoid storing sensitive or confidential data on hosts running Service MWI http
View full ABB PSIRT advisory
API: /api/v1/advisories/fb6a8afb-9084-49f8-964f-c5990c70a7cf

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.

Mint Workbench I Path traversal Vulnerability | CVSS 7.5 - OTPulse