Skip to content
OpenAdvisories
High ICSA-20-154-03 7 CVEs

ABB Multiple System 800xA Products

Published Jun 2, 2020 · Updated Jun 2, 2020

Vendor: ABB Product: 800xA Batch Management Product: 800xA for DCI Product: 800xA for MOD 300 Product: 800xA Information Management Product: 800xA RNRP Product: Base Software for SoftControl Product: MMS Server for AC 800M Product: OPC Server for AC 800M Product: System 800xA Base

Summary

Successful exploitation of these vulnerabilities could allow an attacker to make the system node inaccessible or tamper with runtime data in the system.

Vulnerabilities 7

  • High 7.8
    CVE-2020-8484

    ABB System 800xA Inter process communication vulnerability - 800xA for DCI

    Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows proce…

    ABB 800xA for DCI ICS / OT
  • High 7.8
    CVE-2020-8485

    ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300

    Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows p…

    ABB 800xA for MOD300 ICS / OT
  • High 7.8
    CVE-2020-8488

    ABB System 800xA Inter process communication vulnerability - 800xA Batch Management

    Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and…

    ABB 800xA Batch Management ICS / OT
  • High 7.8
    CVE-2020-8489

    ABB System 800xA Inter process communication vulnerability - 800xA Information Management

    Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the arc…

    ABB 800xA Information Management ICS / OT
  • Medium 6.6
    CVE-2020-8486

    ABB System 800xA Inter process communication vulnerability - 800xA RNRP

    Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling.

    ABB 800xA RNRP ICS / OT
  • Medium 6.6
    CVE-2020-8487

    ABB System 800xA Inter process communication vulnerability - System 800xA Base

    Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling.

    ABB System 800xA Base ICS / OT
  • Medium 5.3
    CVE-2020-8478

    ABB System 800xA Inter process communication vulnerability

    Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system t…

    ABB Base Software for SoftControl MMS Server for AC 800M OPC Server for AC 800M ICS / OT

Revision history

  1. #1

    ICSA-20-154-03 ABB Multiple System 800xA Products

References