CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2021-22277 – AC 800M MMS - Denial of Service vulnerability in MMS communication
https://notcve.org/view.php?id=CVE-2021-22277
01 Apr 2022 — Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service. Una vulnerabilidad de comprobación de entrada inapropiada en ABB 800xA, Software de control para AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl permite a un atacante causar la denegación de servicio • https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-24672 – ABB Base Software for SoftControl Remote Code Execution vulnerability
https://notcve.org/view.php?id=CVE-2020-24672
08 Sep 2021 — A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. This issue affects: . Una vulnerabilidad en Base Software for SoftControl permite a un atacante insertar y ejecutar código arbitrario en un ordenador que ejecute el producto afectado. Este problema afecta a: • https://search.abb.com/library/Download.aspx?DocumentID=2PAA122974&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-20: Improper Input Validation CWE-345: Insufficient Verification of Data Authenticity CWE-862: Missing Authorization •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2020-8478 – ABB System 800xA Inter process communication vulnerability
https://notcve.org/view.php?id=CVE-2020-8478
29 Apr 2020 — Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder. Una protección insuficiente de las funciones de comunicación entre procesos en los productos OPC Server para AC 800M, MMS Server para AC 800M y Base Software para SoftCon... • https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2020-8472 – ABB System 800xA Weak File Permissions - different products
https://notcve.org/view.php?id=CVE-2020-8472
28 Apr 2020 — Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications. Lo... • https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-732: Incorrect Permission Assignment for Critical Resource •