Vulnerability · Published Apr 28, 2020 · Assigned by ABB

CVE-2020-8473ABB System 800xA Weak File Permissions - ABB System 800xA Base

High 7.3

In plain English

A high-severity incorrect permission assignment in System 800xA Base from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.3%top 78.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

Affected products (as reported)

Vendor	Product	Versions
ABB	System 800xA Base	6.1 and earlier

Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch x_refsource_CONFIRM