What is CVE-2020-8485?

CVE-2020-8485 is a high-severity vulnerability in Abb 800xa, classified under CWE-264. CVSS score: 7.8/10. Published 2020-04-29.

How severe is CVE-2020-8485?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Abb 800xa

CVE-2020-8485

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Abb 800xa
Abb 800xa For Mod300 — versions all versions

Weakness classification (CWE)

CWE-264

References

cybersecurity@ch.abb.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-8485?: CVE-2020-8485 is a high-severity vulnerability in Abb 800xa, classified under CWE-264. CVSS score: 7.8/10. Published 2020-04-29.
How severe is CVE-2020-8485?: High severity. CVSS v3 base score is 7.8 out of 10.