Uncontrolled Search Path Element vulnerability in ABB Control Builder A and ABB 800xA for Advant Master allows an attacker who can influence the DLL search path to place a malicious DLL that the application will load. The flaw permits execution of arbitrary code in the context of the application, potentially compromising confidentiality, integrity, or availability of the affected system. The weakness is identified as CWE-427.

Vulnerable products include ABB's Control Builder A up to and including version 1.4/4 and ABB's 800xA for Advant Master up to version 6.2.0‑1, as well as earlier releases 6.0.3‑1, 6.1.1‑1, and 6.1.1‑3. The flaw resides in the DLL loading process of these versions.

With a CVSS score of 4.1 the vulnerability is considered moderate; it does not provide an inherent remote code execution path but could be leveraged by a local or privileged user who can affect DLL loading. The EPSS score is not reported and the vulnerability is not in the CISA KEV catalog, indicating no known widespread exploitation. The risk is elevated in environments where the affected application runs with high privileges or where DLL search paths cannot be tightly controlled, so timely remediation is recommended.