What is the severity of CVE-2020-8477?

CVE-2020-8477 is categorized as a medium severity vulnerability due to its potential to lead to arbitrary code execution via an XSS-like attack.

How do I fix CVE-2020-8477?

To mitigate CVE-2020-8477, upgrade your installation of ABB System 800xA Information Manager to a version that does not include the vulnerable auxiliary component.

Which versions of ABB System 800xA Information Manager are affected by CVE-2020-8477?

CVE-2020-8477 affects ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2, and 6.1.

What type of attack can be executed due to CVE-2020-8477?

CVE-2020-8477 allows for an XSS-like attack that could lead to the execution of arbitrary code by an authenticated local user.

Is remote access required to exploit CVE-2020-8477?

No, CVE-2020-8477 requires an authenticated local user to perform the exploit.

Vulnerability/
CVE-2020-8477

high

8.8

CWE

79 489

22/4/2020

4/8/2024

CVE-2020-8477: ABB System 800xA Information Manager Remote Code Execution

First published: Wed Apr 22 2020(Updated: )

The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.

Credit: cybersecurity@ch.abb.com

Affected Software	Affected Version	How to fix
ABB 800xA	>=6.0.0<=6.0.3.2
ABB 800xA	=5.1
ABB 800xA	=6.1

Never miss a vulnerability like this again

Reference Links

https://search.abb.com/library/Download.aspx?DocumentID=2PAA121232&LanguageCode=en&DocumentPartId=&Action=Launch

Frequently Asked Questions

What is the severity of CVE-2020-8477?
CVE-2020-8477 is categorized as a medium severity vulnerability due to its potential to lead to arbitrary code execution via an XSS-like attack.
How do I fix CVE-2020-8477?
To mitigate CVE-2020-8477, upgrade your installation of ABB System 800xA Information Manager to a version that does not include the vulnerable auxiliary component.
Which versions of ABB System 800xA Information Manager are affected by CVE-2020-8477?
CVE-2020-8477 affects ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2, and 6.1.
What type of attack can be executed due to CVE-2020-8477?
CVE-2020-8477 allows for an XSS-like attack that could lead to the execution of arbitrary code by an authenticated local user.
Is remote access required to exploit CVE-2020-8477?
No, CVE-2020-8477 requires an authenticated local user to perform the exploit.

agent/softwarecombine
agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/references
agent/weakness
agent/author
agent/title
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/abb
canonical/abb 800xa
version/abb 800xa/6.0.0
version/abb 800xa/6.0.3.2
version/abb 800xa/5.1
version/abb 800xa/6.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.