CVE-2020-8485

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
ABB	800xA for MOD300	all versions

References

Timeline

Published: Apr 29, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-84867.8Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker a CVE-2020-84877.8Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker a CVE-2020-84887.8Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables a CVE-2020-84897.8Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) ena CVE-2020-84926.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct CVE-2020-84934.8A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fiel CVE-2020-84948.8In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an atta CVE-2020-84957.5In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an atta CVE-2020-84964.8In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Applic CVE-2020-84975.3In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user n CVE-2020-84985.4XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id paramet CVE-2020-85007.2In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE