csirt@kutim:~/threat-intel/cve/CVE-2020-8475

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Improper Input Validation pada abb 800xa system, abb compact hmi +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, ABB AbilityTM SCADAvantage versions 5.1 to 5.6.5, a weakness in validation of input exists that allows an attacker to block license handling by sending specially crafted messages to the CLS web service.

Rincian

Terbit di NVD
29 April 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
1,2% peluang dieksploitasi; lebih tinggi dari 66,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
abb 800xa system Versi 5.1
abb 800xa system Versi 5.1 feature_pack_4
abb 800xa system Versi 5.1 feature_pack_4_revision_d
abb 800xa system Versi 5.1 revision_a
abb 800xa system Versi 5.1 revision_b
abb 800xa system Versi 5.1 revision_c
abb 800xa system Versi 5.1 revision_d
abb 800xa system Versi 5.1 revision_e
abb 800xa system Versi 5.1 revision_e_feature_pack_4
abb 800xa system Versi 6.0
abb 800xa system Versi 6.0.1
abb 800xa system Versi 6.0.3
abb 800xa system Versi 6.0.3.3
abb 800xa system Versi 6.1
abb compact hmi Versi 5.1
abb compact hmi Versi 5.1 feature_pack_4_revision_d
abb compact hmi Versi 5.1 revision_b
abb compact hmi Versi 5.1 revision_d
abb compact hmi Versi 6.0.1-1
abb compact hmi Versi 6.0.3-2
abb control builder safe Versi 1.0
abb control builder safe Versi 1.1
abb control builder safe Versi 2.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.