ABB Ability System 800xA权限许可和访问控制问题漏洞 漏洞详情

漏洞类型: 注入

危险级别: 低危

CVE编号: CVE-2020-8478

CNVD编号: CNVD-2020-27092

CNNVD编号: CNNVD-202004-2368

发布时间: 2020-04-28

CVSS评分: 4.639649787150001

mms_server *

opc_server *

base_software *

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.

1. 厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://new.abb.com/ 厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://new.abb.com/