What is CVE-2020-8477?

CVE-2020-8477 is a high-severity vulnerability in Abb 800xa Information Manager, classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2020-04-22.

How severe is CVE-2020-8477?

High severity. CVSS v3 base score is 8.8 out of 10.

XSS in Abb 800xa Information Manager

CVE-2020-8477

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Abb 800xa_information_manager — versions 5.1, 6.1
Abb System 800xa Information Manager — versions 5, 6.0, 6.1

Weakness classification (CWE)

References

cybersecurity@ch.abb.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-8477?: CVE-2020-8477 is a high-severity vulnerability in Abb 800xa Information Manager, classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2020-04-22.
How severe is CVE-2020-8477?: High severity. CVSS v3 base score is 8.8 out of 10.