CVE-2020-8478

ABB System 800xA Inter process communication vulnerability

Medium · published April 29, 2020

CVSS v3.1
5.3
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Published
2020-04-29T01:58Z
EPSS history
Timeline
  • 29 APR 01:58Z
    ABB System 800xA Inter process communication vulnerability
    cvelistv5