Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-8477

ABB System 800xA Information Manager Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB System 800xA Information Manager

  • 5 to ≤ 5.1affected
  • 6.0 to ≤ 6.0.3.2affected
  • 6.1 to < 6.1*affected

References