CVE-2020-8486

ABB System 800xA Inter process communication vulnerability - 800xA RNRP

Medium6.6EPSS 0.33%

Published: 29 Apr 2020
Updated: 4 Aug 2024
Reserved: 30 Jan 2020
Assigned by: ABB

Description

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling.

Scores

CVSS scores of CVE-2020-8486, by who scored it
Scored by	CVSS	Score	Vector
ABBCNA (assigner)	3.1	Medium6.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
NVDNVD · Modified	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.33% · top 74% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.6.

Weakness

CWE-264 Permissions, Privileges, and Access Controls (opens in a new tab)All about CWE-264 and its CVEs

Affected products

ABB · 800xA RNRP
- affected all versions

References (1)

https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-8486](https://trackcve.app/badge/CVE-2020-8486.svg)](https://trackcve.app/cve/CVE-2020-8486)

Record last updated 4 Aug 2024, 10:03 UTC.