MEDIUM🇵🇱 Wersja polska

CVE-2020-8478

CVSS 5.3v3.1pub. 2020-04-29upd. 2024-11-21

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

  • Abb Ac800m

    HW
    Abb
    all versions

  • Abb Base Software

    APP
    Abb
    all versions

  • Abb Mms Server

    APP
    Abb
    all versions

  • Abb Opc Server

    APP
    Abb
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-24672CRITICAL9.8PL ✓same product

RCE w ABB Base Software for SoftControl — wykonanie dowolnego kodu

CVE-2021-22277HIGH7.5same product

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Comp...

CVE-2020-8472MEDIUM5.5same product

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (ve...

CVE-2024-51547CRITICAL9.3PL ✓same vendor

Zakodowane na stałe dane uwierzytelniające w urządzeniach ABB ASPECT/NEXUS/MATRIX

CVE-2024-11317CRITICAL9.3PL ✓same vendor

Session Fixation w ABB ASPECT i NEXUS/MATRIX Series — przejęcie sesji użytkownika