Skip to content
OpenAdvisories
High ICSA-20-154-01 2 CVEs

ABB System 800xA

Published Jun 2, 2020 · Updated Jun 2, 2020

Vendor: ABB Product: Base Software for SoftControl Product: Control Builder M Professional Product: MMS Server for AC 800M Product: OPC Server for AC 800M Product: System 800xA Base

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, cause system functions to stop, and corrupt user applications.

Vulnerabilities 2

  • High 7.3
    CVE-2020-8473

    ABB System 800xA Weak File Permissions - ABB System 800xA Base

    Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnera…

    ABB System 800xA Base ICS / OT
  • Medium 5.5
    CVE-2020-8472

    ABB System 800xA Weak File Permissions - different products

    Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low p…

    ABB Base Software for SoftControl MMS Server for AC 800M OPC Server for AC 800M ICS / OT

Revision history

  1. #1

    ICSA-20-154-01 ABB System 800xA

References