Lucene search

K
cvelistABBCVELIST:CVE-2020-8487
HistoryApr 29, 2020 - 1:59 a.m.

CVE-2020-8487 ABB System 800xA Inter process communication vulnerability - System 800xA Base

2020-04-2901:59:28
CWE-264
ABB
www.cve.org

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling.

CNA Affected

[
  {
    "product": "System 800xA Base",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

Related for CVELIST:CVE-2020-8487