What’s Vulnerable › Vulnerabilities

CVE-2020-8472: ABB System 800xA Weak File Permissions - different products

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-29 · updated 2026-06-17
• Weakness: CWE-732

Description

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

Affected products

• ABB Base Software for SoftControl: through 6.1
• ABB Control Builder M: through 6.1
• ABB Mms Server: through 6.1
• ABB Opc Server: through 6.0

References

• https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2020-8472 or the next vulnerability affects your stack