PT-2020-20159 · Abb · Abb System 800Xa

Published 2020-04-28 · Updated 2020-05-14 · CVE-2020-8473

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB System 800xA Base versions 6.1 and earlier

Description The issue is related to insufficient folder permissions used by system functions, allowing low-privileged users to read, modify, add, and delete system and application files. An authenticated attacker could exploit this to escalate privileges, stop system functions, and corrupt user applications.

Recommendations For ABB System 800xA Base versions 6.1 and earlier, update to a version later than 6.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-8473

Affected Products

Abb System 800Xa

References · 4

• https://osv.dev/vulnerability/CVE-2020-8473 · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8473 · Security Note
• https://t.me/cvenotify/3370 · Telegram Post