Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAbb 800xa
APPAbball versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2021-22277HIGH7.5same product
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Comp...
CVE-2020-8485HIGH7.8same product
Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all publ...
CVE-2024-51547CRITICAL9.3PL ✓same vendor
Zakodowane na stałe dane uwierzytelniające w urządzeniach ABB ASPECT/NEXUS/MATRIX
CVE-2024-11317CRITICAL9.3PL ✓same vendor
Session Fixation w ABB ASPECT i NEXUS/MATRIX Series — przejęcie sesji użytkownika
CVE-2024-48839CRITICAL9.3PL ✓same vendor
RCE poprzez nieprawidłową walidację danych wejściowych w ABB ASPECT/NEXUS/MATRIX