CVE-2020-8472

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

CVE-2020-8472

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

CVE-2020-8473

Insufficient folder permissions used by system functions in ABB System 800xA Base version 6.1 and earlier allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her...

Authorization

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

ABB System 800xA Base Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. A privilege permission and access control issue vulnerability exists in ABB System 800xA Base all versions, which can be exploited by a local attacker to inject data and affect node...

CVE-2020-8479

CVE-2020-8479 is an XML External Entity Injection vulnerability in ABB Central Licensing Server components across ABB Ability System 800xA, Compact HMI, and related products. The issue allows an attacker to read or call arbitrary files from the license server and/or the network, and can also bloc...

CVE-2020-8476

CVE-2020-8476 affects ABB CLS across ABB Ability System 800xA and related components, where a weakness in input validation in the Central Licensing Server allows an attacker to alter licenses assigned to system nodes. Reported impact is license manipulation (credentials/permissions could be misap...

ABB System 800xA Batch Management Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Batch Management is an application software package from ABB Switzerland for configuring, scheduling and managing batch operations. A vulnerability in privilege permission and access control issues exists in ABB System 800xA Batch Management all versions, which can be exploited b...

ABB System 800xA for MOD 300 Privilege License and Access Control Issues Vulnerability

ABB System 800xA for MOD 300 is a distributed control system for MOD 300 from ABB Switzerland. A vulnerability in ABB System 800xA for MOD 300 all versions with privilege permission and access control issues can be exploited by a local attacker to inject data, read or write to the controller or...

CVE-2020-8476 ABB Central Licensing System - Elevation of Privilege Vulnerability

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...

ABB Ability System 800xA Privilege License and Access Control Issues Vulnerability

ABB Ability System 800xA is a distributed control system from ABB Switzerland for the industrial control industry. A privilege permission and access control issue vulnerability exists in ABB System 800xA all versions, which can be exploited by a local attacker to inject data and affect the view o...

CVE-2020-8479 ABB Central Licensing System - XML External Entity Injection

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...

CVE-2020-8473 ABB System 800xA Weak File Permissions - ABB System 800xA Base

Insufficient folder permissions used by system functions in ABB System 800xA Base version 6.1 and earlier allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her...

CVE-2020-8473

CVE-2020-8473 affects ABB System 800xA Base (versions 6.1 and earlier). The vulnerability is due to insufficient folder permissions in system folders, enabling low-privileged users to read, modify, add or delete system and application files. An authenticated attacker could escalate privileges, ca...

CVE-2020-8472

CVE-2020-8472 affects ABB System 800xA components: OPCServer for AC800M (v6.0 and earlier), Control Builder M Professional, MMS Server for AC800M, and Base Software for SoftControl (v6.1 and earlier). Root cause is insufficient/weak default folder permissions (CWE-276) allowing low-privileged use...

CVE-2020-8472 ABB System 800xA Weak File Permissions - different products

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

ABB System 800xA Base License Issue Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. An authorization issue vulnerability exists in ABB System 800xA Base. An attacker could use this vulnerability to read and modify registry settings related to control system...

CVE-2020-8477

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code...

CVE-2020-8474

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction...

CVE-2020-8474

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction...