CVE-2020-8478

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-264CWE-74

Affected software

VendorProductVersions
ABBOPC Server for AC 800Mall versions
ABBMMS Server for AC 800Mall versions
ABBBase Software for SoftControlall versions

References

Timeline

Published
Apr 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-84799.8For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 anCVE-2020-84819.8For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, ControCVE-2020-84825.5Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilCVE-2020-84847.8Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attackeCVE-2020-84857.8Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attCVE-2020-84867.8Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker aCVE-2020-84877.8Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker aCVE-2020-84887.8Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables aCVE-2020-84897.8Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enaCVE-2020-84926.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct CVE-2020-84934.8A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fielCVE-2020-84948.8In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an atta