CVE-2020-8473

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Apr 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-84747.8Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control systemCVE-2020-84757.5For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 anCVE-2020-84767.5For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 anCVE-2020-84778.8The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An aCVE-2020-84783.3Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC CVE-2020-84799.8For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 anCVE-2020-84819.8For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, ControCVE-2020-84825.5Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilCVE-2020-84847.8Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attackeCVE-2020-84857.8Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attCVE-2020-84867.8Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker aCVE-2020-84877.8Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker a