1. Home
  2. CVE Database
  3. CVE-2020-8489
HIGH · 7.8

CVE-2020-8489

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject...

Vulnerability Description

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management history services unavailable.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Abb800Xa Information ManagementAll versions

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2020-8489?

CVE-2020-8489 is a vulnerability with a CVSS score of 7.8 (HIGH). Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject...

How severe is CVE-2020-8489?

CVE-2020-8489 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8489?

Check the references section above for vendor advisories and patch information. Affected products include: Abb 800Xa Information Management.