Lucene search
+L

CVE-2020-8472

🗓️ 28 Apr 2020 23:52:41Reported by ABBType 
cve
 cve
🔗 web.nvd.nist.gov👁 101 Views

Insufficient folder permissions in ABB System 800xA products allow unauthorized access and privilege escalation

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2020-8472
29 Apr 202000:15
–attackerkb
cnvd
CNVD
Access Control Error Vulnerability in Multiple ABB Products
29 Apr 202000:00
–cnvd
cvelist
Cvelist
CVE-2020-8472 ABB System 800xA Weak File Permissions - different products
28 Apr 202023:52
–cvelist
euvd
EUVD
EUVD-2020-29338
7 Oct 202500:30
–euvd
ics
ICS
ABB System 800xA
2 Jun 202000:00
–ics
nvd
NVD
CVE-2020-8472
29 Apr 202000:15
–nvd
osv
OSV
CVE-2020-8472
29 Apr 202000:15
–osv
nessus
Tenable Nessus
Abb Base Incorrect Permission Assignment for Critical Resource
10 Aug 202100:00
–nessus
prion
Prion
Authorization
29 Apr 202000:15
–prion
ptsecurity
Positive Technologies
PT-2020-20158
28 Apr 202000:00
–ptsecurity
Rows per page
NVD
Vulners
Node
AND
OR
abbcontrol_builder_mRange≤6.1professional
abbmms_serverRange≤6.1
abbopc_serverRange≤6.0
abbac800mMatch-
Node
abbbase_softwareRange≤6.1softcontrol
[
  {
    "product": "OPC Server for AC 800M",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "6.0 and earlier"
      }
    ]
  },
  {
    "product": "Control Builder M Professional",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "6.1 and earlier"
      }
    ]
  },
  {
    "product": "MMS Server for AC 800M",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "6.1 and earlier"
      }
    ]
  },
  {
    "product": "Base Software for SoftControl",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "6.1 and earlier"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:26Current
6.5Medium risk
Vulners AI Score6.5
CVSS 26.8
CVSS 3.15.5 - 7.8
EPSS0.00279
101