CVE-2020-8489
ABB System 800xA Inter process communication vulnerability - 800xA Information Management
- State
- Published
- Severity
- 7.8 High
- Published
- Apr 29, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 30, 2020
Description
Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management history services unavailable.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | ABB |
Weaknesses
- CWE-264 Permissions, Privileges, and Access Controls
Affected Products
| Product | Versions |
|---|---|
800xA Information ManagementABB |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.