What is CVE-2020-8473?

CVE-2020-8473 is a high-severity vulnerability in Abb 800xa Base System, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.3/10. Published 2020-04-29.

How severe is CVE-2020-8473?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in Abb 800xa Base System

CVE-2020-8473

Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

EPSS: 0.003 (21.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Abb 800xa_base_system
Abb System 800xa Base — versions 6.1 and earlier

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

cybersecurity@ch.abb.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-8473?: CVE-2020-8473 is a high-severity vulnerability in Abb 800xa Base System, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.3/10. Published 2020-04-29.
How severe is CVE-2020-8473?: High severity. CVSS v3 base score is 7.3 out of 10.