PT-2020-20172 · Abb · Abb System 800Xa Information Management

Published 2020-04-29 · Updated 2020-05-08 · CVE-2020-8489

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB System 800xA Information Management (all published versions)

Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This can affect runtime values stored in the archive or make Information Management history services unavailable.

Recommendations For all published versions of ABB System 800xA Information Management, consider restricting access to inter-process communication functions to prevent data injection until a patch is available. As a temporary workaround, limit the privileges of authenticated users on the local system to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2020-8489

Affected Products

Abb System 800Xa Information Management

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-8489 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://t.me/cvenotify/3383 · Telegram Post