CVE-2020-11640CWE-269

Elevation of Privilege

High · published July 23, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the

command queue can use it to launch an attack by running any executable on the AdvaBuild node. The

executables that can be run are not limited to AdvaBuild specific executables.

Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-07-23T17:36Z
EPSS history
Timeline
  • 23 JUL 17:36Z
    Elevation of Privilege
    cvelistv5