CVE-2020-11640

ABB Advant MOD 300 AdvaBuild (versions 3.0–3.7 SP2) is affected by CVE-2020-11640 due to improper privilege management in the command queue. An attacker who gains access to the command queue can trigger execution of arbitrary executables on the AdvaBuild node, not limited to AdvaBuild utilities, ...

CVE-2020-11639

This CVE concerns ABB Advant MOD 300 AdvaBuild versions 3.0–3.7 SP2 with vulnerability in inter-process communication leading to data tampering and denial of service. An attacker with local access can run a crafted application to inject garbage/Special data, potentially causing process crashes or...