CVE-2020-8486 ABB System 800xA Inter process communication vulnerability - 800xA RNRP

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

CVE-2020-8486

The CVE-2020-8486 entry concerns ABB System 800xA RNRP (and related 800xA components) with insufficient protection of inter-process communication. The vulnerability arises from weak access control in IPC objects exchanged between System 800xA processes on the same machine, allowing an authenticat...

CVE-2020-8485

CVE-2020-8485 affects ABB System 800xA MOD 300; the inter-process communication protections are insufficient, allowing a locally authenticated attacker to inject data and enable reads/writes to controllers or crash Windows processes. Affected: System 800xA MOD 300 (all published versions). Impact...

CVE-2020-8485 ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

CVE-2020-8484

ABB System 800xA for DCI contains an inter-process communication protection weakness that allows an authenticated local attacker to inject data, enabling reads/writes to controllers or causing Windows processes to crash. Affected products include System 800xA for DCI (all published versions). CVS...

CVE-2020-8484 ABB System 800xA Inter process communication vulnerability - 800xA for DCI

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

CVE-2020-8478

The CVE-2020-8478 issue affects ABB System 800xA components (OPC Server for AC 800M, MMS Server for AC 800M, and Base Software for SoftControl) where weak inter-process communication access controls allow an authenticated local attacker to inject data and tamper the online runtime data view in Co...

CVE-2020-8478 ABB System 800xA Inter process communication vulnerability

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

ABB System 800xA RNRP Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA RNRP is a redundant network routing protocol from ABB Switzerland used in the ABB System 800xA distributed control system. A vulnerability in ABB System 800xA RNRP all versions with privilege permission and access control issues can be exploited by a local attacker to inject data...

ABB System 800xA for DCI Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA for DCI is a distributed control system for DCI from ABB Switzerland. A privilege permission and access control issue vulnerability exists in ABB System 800xA for DCI all versions, which can be exploited by a local attacker to inject data, read or write to the controller or cause...

ABB System 800xA Base Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. A privilege permission and access control issue vulnerability exists in ABB System 800xA Base all versions, which can be exploited by a local attacker to inject data and affect node...

CVE-2020-8487: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

CVE-2020-8478: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

PT-2020-20171

Name of the Vulnerable Software and Affected Versions ABB System 800xA Batch Management all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This affects...

ABB System 800xA Information Management Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Information Management is an information management system from ABB Switzerland. The system provides intelligent data access to real-time and historical information from all applications in the extended automation system. A vulnerability in ABB System 800xA Information Management...

CVE-2020-8488: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management all published versions enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities...

ABB System 800xA Batch Management Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Batch Management is an application software package from ABB Switzerland for configuring, scheduling and managing batch operations. A vulnerability in privilege permission and access control issues exists in ABB System 800xA Batch Management all versions, which can be exploited b...

ABB System 800xA for MOD 300 Privilege License and Access Control Issues Vulnerability

ABB System 800xA for MOD 300 is a distributed control system for MOD 300 from ABB Switzerland. A vulnerability in ABB System 800xA for MOD 300 all versions with privilege permission and access control issues can be exploited by a local attacker to inject data, read or write to the controller or...

CVE-2020-8489: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management all published versions enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management...

CVE-2020-8485: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...