Vulnerability Description
AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables. Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Abb | Advabuild | >= 3.0, < 3.7 |
Related Weaknesses (CWE)
References
- https://search.abb.com/library/Download.aspx?DocumentID=3BUA003421&LanguageCode=Vendor Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=3BUA003421&LanguageCode=Vendor Advisory
FAQ
What is CVE-2020-11640?
CVE-2020-11640 is a vulnerability with a CVSS score of 8.8 (HIGH). AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The execu...
How severe is CVE-2020-11640?
CVE-2020-11640 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-11640?
Check the references section above for vendor advisories and patch information. Affected products include: Abb Advabuild.