1. Home
  2. CVE Database
  3. CVE-2020-8484
HIGH · 7.8

CVE-2020-8484

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing...

Vulnerability Description

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Abb800XaAll versions

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2020-8484?

CVE-2020-8484 is a vulnerability with a CVSS score of 7.8 (HIGH). Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing...

How severe is CVE-2020-8484?

CVE-2020-8484 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8484?

Check the references section above for vendor advisories and patch information. Affected products include: Abb 800Xa.