{"id":"CVE-2020-8488","state":"PUBLISHED","title":"ABB System 800xA Inter process communication vulnerability - 800xA Batch Management","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities.","publishedAt":"2020-04-29T01:59:34.000Z","updatedAt":"2024-08-04T10:03:44.822Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"ABB"},"assigner":"ABB","products":["ABB 800xA Batch Management"],"affected":[{"vendor":"ABB","product":"800xA Batch Management","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch"],"weaknesses":["CWE-264"],"ingestedAt":"2026-10-29T19:47:44.297Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/8xxx/CVE-2020-8488.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-8488","state":"PUBLISHED","datePublished":"2020-04-29T01:59:34.000Z","dateUpdated":"2024-08-04T10:03:44.822Z","assignerShortName":"ABB","assignerOrgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateReserved":"2020-01-30T00:00:00.000Z"},"containers":{"cna":{"title":"ABB System 800xA Inter process communication vulnerability - 800xA Batch Management","descriptions":[{"lang":"en","value":"Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities."}],"affected":[{"vendor":"ABB","product":"800xA Batch Management","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-264","description":"CWE-264 Permissions, Privileges, and Access Controls","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ABB","dateUpdated":"2020-04-29T01:59:34.000Z","orgId":"2b718523-d88f-4f37-9bbd-300c20644bf9"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cybersecurity@ch.abb.com","ID":"CVE-2020-8488","STATE":"PUBLIC","TITLE":"ABB System 800xA Inter process communication vulnerability - 800xA Batch Management"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"800xA Batch Management","version":{"version_data":[{"version_affected":"undefined","version_value":"all versions"}]}}]},"vendor_name":"ABB"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-264 Permissions, Privileges, and Access Controls"}]}]},"references":{"reference_data":[{"name":"https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch","refsource":"CONFIRM","url":"https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:03:44.822Z"}}]}}}