CVE-2020-8485

ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300

High · published April 29, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.3th percentile
Published
2020-04-29T01:59Z
EPSS history
Timeline
  • 29 APR 01:59Z
    ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300
    cvelistv5