CVE-2020-8478

🗓️ 29 Apr 2020 01:58:54Reported by ABBType

Insufficient protection of inter-process communication functions in ABB System 800xA products enables injection, affecting runtime data in Control Builder

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2020-8478	29 Apr 202002:15	–	attackerkb
Circl	CVE-2020-8478	20 May 202014:27	–	circl
CNVD	ABB Ability System 800xA Privilege License and Access Control Issues Vulnerability	29 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-8478 ABB System 800xA Inter process communication vulnerability	29 Apr 202001:58	–	cvelist
EUVD	EUVD-2020-29344	7 Oct 202500:30	–	euvd
ICS	ABB Multiple System 800xA Products	2 Jun 202000:00	–	ics
NVD	CVE-2020-8478	29 Apr 202002:15	–	nvd
Tenable Nessus	Abb Base Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	10 Aug 202100:00	–	nessus
Prion	Design/Logic Flaw	29 Apr 202002:15	–	prion
RedhatCVE	CVE-2020-8478	22 May 202515:42	–	redhatcve

NVD

Node

AND

abb mms_server

abb opc_server

abb ac800mMatch-

Node

abb base_softwaresoftcontrol

[
  {
    "product": "OPC Server for AC 800M",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "MMS Server for AC 800M",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "Base Software for SoftControl",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

17 Jun 2026 03:26Current

4.1Medium risk

Vulners AI Score4.1

CVSS 22.1

CVSS 3.13.3 - 5.3

EPSS0.0034