QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-8471

Back to search

CVE-2020-8471

Published: Apr 29, 2020

Modified: Aug 4, 2024

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, weak file permissions allow an authenticated attacker to block the license handling, escalate his/her privileges and execute arbitrary code.

VendorProductVersions

ABB

Central Licensing System

affected
5.1 - < 5*

ABB

ABB Ability System 800xA

affected
5.1
affected
6.0
affected
6.1

ABB

Compact HMI

affected
5.1
affected
6.0

ABB

Control Builder Safe

affected
1.0
affected
1.1
affected
2.0

ABB

Symphony Plus S+ Operations

affected
3 - <= 3.2

ABB

Symphony Plus S+ Engineering

affected
1.1 - <= 2.2

ABB

Composer Harmony

affected
5.1
affected
6.0
affected
6.1

ABB

Composer Melody

affected
5.3
affected
6 - <= 6.3

ABB

Harmony OPC Server Standalone

affected
6.0
affected
6.1
affected
7.0

ABB

Advant OCS Control Builder A

affected
1.3
affected
1.4

ABB

Composer CTK

affected
6.1
affected
6.2

ABB

AdvaBuild

affected
3.7 SP1
affected
3.7 SP2

ABB

OPC Server for Mod 300 (non-800xA)

affected
1.4

ABB

OPC Data Link

affected
2.1
affected
2.2

ABB

Knowledge Manager

affected
8.0
affected
9.0
affected
9.1

ABB

Manufacturing Operations Management

affected
1812
affected
1909

ABB

Advant OCS AC 100 OPS Server

affected
5.1
affected
6.0
affected
6.1

Weaknesses (CWE)

CWE-275

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now