VULNERABILITY INTELLIGENCE

CVE-2020-8485

CVSS score7.8 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2020-04-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

Weakness classification

  • cybersecurity@ch.abb.com: CWE-264
  • nvd@nist.gov: NVD-CWE-Other

Primary references