CVE-2020-8472CWE-732

ABB System 800xA Weak File Permissions - different products

Medium · published April 28, 2020

CVSS v3.1
5.5
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.2th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2020-04-28T23:52Z
EPSS history
Timeline
  • 28 APR 23:52Z
    ABB System 800xA Weak File Permissions - different products
    cvelistv5