ABB System 800xA Information Management权限许可和访问控制问题漏洞 漏洞详情

漏洞类型: 其他

危险级别: 高危

CVE编号: CVE-2020-8489

CNVD编号: CNVD-2020-27098

CNNVD编号: CNNVD-202004-2376

发布时间: 2020-04-28

CVSS评分: 7.150081900415999

800xa_information_management *

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management history services unavailable.

1. 厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://new.abb.com/ 厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://new.abb.com/