Lucene search
+L

1110 matches found

Prion
Prion
•added 2020/04/29 2:15 a.m.•28 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

4.6CVSS7.3AI score0.0033EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/29 2:15 a.m.•32 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management all published versions enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management...

4.6CVSS7.3AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/29 2:15 a.m.•27 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management all published versions enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities...

4.6CVSS7.4AI score0.00406EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/29 2:15 a.m.•25 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

4.6CVSS7.4AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/29 2:15 a.m.•34 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

2.1CVSS4.6AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/29 1:59 a.m.•34 views

CVE-2020-8489 ABB System 800xA Inter process communication vulnerability - 800xA Information Management

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management all published versions enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management...

7.8CVSS7.4AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/29 1:59 a.m.•112 views

CVE-2020-8489

ABB System 800xA Information Management is affected by CVE-2020-8489 due to insufficient protection of inter-process communication functions. The vulnerability allows an attacker authenticated on the local system to inject data, potentially altering runtime values stored in the archive or making ...

7.8CVSS7.4AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/29 1:59 a.m.•47 views

CVE-2020-8487 ABB System 800xA Inter process communication vulnerability - System 800xA Base

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

6.6CVSS7.4AI score0.0033EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/29 1:59 a.m.•125 views

CVE-2020-8487

CVE-2020-8487 affects ABB System 800xA Base. The issue is insufficient protection of inter-process communication, allowing an attacker authenticated on the local system to inject data and affect node redundancy handling. Affected products include System 800xA Base (all published versions). Impact...

7.8CVSS6.7AI score0.0033EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/29 1:59 a.m.•111 views

CVE-2020-8486

The CVE-2020-8486 entry concerns ABB System 800xA RNRP (and related 800xA components) with insufficient protection of inter-process communication. The vulnerability arises from weak access control in IPC objects exchanged between System 800xA processes on the same machine, allowing an authenticat...

7.8CVSS6.7AI score0.0033EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/29 1:59 a.m.•34 views

CVE-2020-8486 ABB System 800xA Inter process communication vulnerability - 800xA RNRP

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

6.6CVSS7.4AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/29 1:59 a.m.•40 views

CVE-2020-8485 ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

7.8CVSS7.5AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/29 1:59 a.m.•122 views

CVE-2020-8485

CVE-2020-8485 affects ABB System 800xA MOD 300; the inter-process communication protections are insufficient, allowing a locally authenticated attacker to inject data and enable reads/writes to controllers or crash Windows processes. Affected: System 800xA MOD 300 (all published versions). Impact...

7.8CVSS7.5AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/29 1:58 a.m.•42 views

CVE-2020-8484 ABB System 800xA Inter process communication vulnerability - 800xA for DCI

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

7.8CVSS7.5AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/29 1:58 a.m.•116 views

CVE-2020-8484

ABB System 800xA for DCI contains an inter-process communication protection weakness that allows an authenticated local attacker to inject data, enabling reads/writes to controllers or causing Windows processes to crash. Affected products include System 800xA for DCI (all published versions). CVS...

7.8CVSS7.5AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/29 1:58 a.m.•44 views

CVE-2020-8478 ABB System 800xA Inter process communication vulnerability

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

5.3CVSS5.1AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/29 1:58 a.m.•122 views

CVE-2020-8478

The CVE-2020-8478 issue affects ABB System 800xA components (OPC Server for AC 800M, MMS Server for AC 800M, and Base Software for SoftControl) where weak inter-process communication access controls allow an authenticated local attacker to inject data and tamper the online runtime data view in Co...

5.3CVSS4.1AI score0.0034EPSS
SaveExploits0References1Affected Software2
CNVD
CNVD
•added 2020/04/29 12:00 a.m.•18 views

ABB System 800xA Batch Management Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Batch Management is an application software package from ABB Switzerland for configuring, scheduling and managing batch operations. A vulnerability in privilege permission and access control issues exists in ABB System 800xA Batch Management all versions, which can be exploited b...

7.8CVSS6.7AI score0.00406EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/29 12:00 a.m.•17 views

ABB System 800xA for MOD 300 Privilege License and Access Control Issues Vulnerability

ABB System 800xA for MOD 300 is a distributed control system for MOD 300 from ABB Switzerland. A vulnerability in ABB System 800xA for MOD 300 all versions with privilege permission and access control issues can be exploited by a local attacker to inject data, read or write to the controller or...

7.8CVSS6.7AI score0.0034EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/29 12:00 a.m.•3 views

PT-2020-20172

Name of the Vulnerable Software and Affected Versions ABB System 800xA Information Management all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This ca...

7.8CVSS0.0034EPSS
SaveExploits0References3
Rows per page
Query Builder