CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-22284 – SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-22284
04 Feb 2022 — Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server. Una vulnerabilidad de Asignación de Permisos Incorrecta para Recursos Críticos en el Servidor OPC para AC 800M permite a un atacante ejecutar código arbitrario en el nodo que ejecuta el Servidor OPC AC800M • https://search.abb.com/library/Download.aspx?DocumentID=7PAA000908&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2020-8478 – ABB System 800xA Inter process communication vulnerability
https://notcve.org/view.php?id=CVE-2020-8478
29 Apr 2020 — Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder. Una protección insuficiente de las funciones de comunicación entre procesos en los productos OPC Server para AC 800M, MMS Server para AC 800M y Base Software para SoftCon... • https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2020-8472 – ABB System 800xA Weak File Permissions - different products
https://notcve.org/view.php?id=CVE-2020-8472
28 Apr 2020 — Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications. Lo... • https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 9.8EPSS: 0%CPEs: 7EXPL: 0CVE-2012-1801
https://notcve.org/view.php?id=CVE-2012-1801
18 Apr 2012 — Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data. Múltiples desbordamientos de búfer basados ??en la pila en controles (1) COM y (2) ActiveX en ABB WebWare Server SDK WebWare, Módulo de Interlink, S4 Servidor OPC, QuickTeach, S4 RobotStudio y RobotStudio Lite permite a atacantes remotos ejecutar ... • http://secunia.com/advisories/48693 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 27%CPEs: 10EXPL: 0CVE-2012-0245
https://notcve.org/view.php?id=CVE-2012-0245
09 Mar 2012 — Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Module, IRC5 OPC Server, PC SDK, PickMaster 3 and 5, RobView 5, RobotStudio, WebWare SDK, and WebWare Server, allow remote attackers to execute arbitrary code via a crafted (1) 0xA or (2) 0xE Netscan packet. Múltiples vulnerabilidades de desbordamiento de búfer basados ??en pila en RobNetScanHost.exe en ABB Robot Comunications Runtime antes de v5.14.02, tal y como se utili... • http://archives.neohapsis.com/archives/bugtraq/2012-02/0125.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •