CVE-2020-8485 - ABB System 800xA Inter process communication vulnerability

Back Back to CVE browser

HIGH

ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300

Published Apr 29, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.34%

Description

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

Affected products

Vendor ABB Product 800xA for MOD300 Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ABB

800xA for MOD300

n/a

Version	Status	Constraints
all versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29351
Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29351		Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch		x_refsource_CONFIRMVendor Advisory