What’s Vulnerable › Vulnerabilities

CVE-2020-8478: ABB System 800xA Inter process communication vulnerability

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-29 · updated 2026-06-17
• Weakness: CWE-264

Description

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.

Affected products

• ABB Base Software for SoftControl: all versions
• ABB Mms Server: all versions
• ABB Opc Server: all versions

References

• https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2020-8478 or the next vulnerability affects your stack