Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-8472 Details

Description

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch CVEVendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch [email protected]Vendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-732Incorrect Permission Assignment for Critical Resource[email protected]
CWE-732Incorrect Permission Assignment for Critical Resource[email protected]

Affected Products

ProductVersions
abb control builder m
<= 6.1

CPE

  • cpe:2.3:a:abb:control_builder_m:*:*:*:*:professional:*:*:*

Remediation

  • No remediation found in references.
abb mms server
<= 6.1

CPE

  • cpe:2.3:a:abb:mms_server:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
abb opc server
<= 6.0

CPE

  • cpe:2.3:a:abb:opc_server:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
abb ac800m
All versions

CPE

  • cpe:2.3:h:abb:ac800m:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
abb base software
<= 6.1

CPE

  • cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-8472
NVD Published Date:
Apr 29, 2020
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]