CVE-2020-8482 - ABB Device Library Wizard Information Disclosure Vulnerability

Back Back to CVE browser

HIGH

ABB Device Library Wizard Information Disclosure Vulnerability

Published May 29, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.32%

Description

Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data

Affected products

Vendor ABB Product ABB Device Library Wizard Default
n/a
- Version
  6 <= 6.0.3.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ABB

ABB Device Library Wizard

n/a

Version	Status	Constraints
6 <= 6.0.3.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-922

References (1)

https://search.abb.com/library/Download.aspx?DocumentID=2PAA121681&LanguageCode=en&DocumentPartId=&Action=Launch
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121681&LanguageCode=en&DocumentPartId=&Action=Launch		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published May 29, 2020

Updated Aug 4, 2024

Reserved Jan 30, 2020

Link CVE-2020-8482

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8482

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8482