Skip to content
OpenAdvisories
High ICSA-20-184-02 1 CVE

ABB System 800xA Information Manager

Published Jul 2, 2020 · Updated Jul 2, 2020

Vendor: ABB Product: System 800xA Information Manager

Summary

Successful exploitation of this vulnerability could allow an attacker to inject and execute arbitrary code on the information manager server.

Vulnerabilities 1

  • High 8.8
    CVE-2020-8477

    ABB System 800xA Information Manager Remote Code Execution

    The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arb…

    ABB System 800xA Information Manager ICS / OT

Revision history

  1. #1

    ICSA-20-184-02 ABB System 800xA Information Manager

References