CVE-2020-8486: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

CVE-2020-8485: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

PT-2020-20171

Name of the Vulnerable Software and Affected Versions ABB System 800xA Batch Management all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This affects...

CVE-2020-8478: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

PT-2020-20167

Name of the Vulnerable Software and Affected Versions ABB System 800xA for DCI all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This enables the...

ABB System 800xA Information Management Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Information Management is an information management system from ABB Switzerland. The system provides intelligent data access to real-time and historical information from all applications in the extended automation system. A vulnerability in ABB System 800xA Information Management...

CVE-2020-8484: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

ABB System 800xA Base Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. A privilege permission and access control issue vulnerability exists in ABB System 800xA Base all versions, which can be exploited by a local attacker to inject data and affect node...

PT-2020-20163

Name of the Vulnerable Software and Affected Versions ABB System 800xA products affected versions not specified Description The issue is related to insufficient protection of inter-process communication functions in ABB System 800xA products, including OPC Server for AC 800M, MMS Server for AC...

PT-2020-20168

Name of the Vulnerable Software and Affected Versions ABB System 800xA for MOD 300 all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This enables the...

PT-2020-20170

Name of the Vulnerable Software and Affected Versions ABB System 800xA Base all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an attacker authenticated on the local system to inject data and affect node redundancy...

CVE-2020-8488: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management all published versions enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities...

CVE-2020-8487: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

CVE-2020-8489: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management all published versions enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management...

ABB System 800xA RNRP Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA RNRP is a redundant network routing protocol from ABB Switzerland used in the ABB System 800xA distributed control system. A vulnerability in ABB System 800xA RNRP all versions with privilege permission and access control issues can be exploited by a local attacker to inject data...

ABB System 800xA for DCI Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA for DCI is a distributed control system for DCI from ABB Switzerland. A privilege permission and access control issue vulnerability exists in ABB System 800xA for DCI all versions, which can be exploited by a local attacker to inject data, read or write to the controller or cause...

PT-2020-20169

Name of the Vulnerable Software and Affected Versions ABB System 800xA RNRP all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an attacker authenticated on the local system to inject data and affect node redundancy...

CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)

A flaw was found in the TLS/SSL implementation in the JSSE component of OpenJDK, where it did not properly handle application data packets received before the handshake completion. This flaw allowed unauthorized injection of data at the beginning of a TLS session...

OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)

A flaw was found in the TLS/SSL implementation in the JSSE component of OpenJDK, where it did not properly handle application data packets received before the handshake completion. This flaw allowed unauthorized injection of data at the beginning of a TLS session...