Paper/Archive/CVE-2020-8481

CVE-2020-8481

ABB Central Licensing System — ABB Central Licensing System - Information disclosure

Description · from the CVE record

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, confidential data is written in an unprotected file. An attacker who successfully exploited this vulnerability could take full control of the computer.

Affected

ProductAffectedFixed inSource
Central Licensing System5.1 – < 5*5*CNA
ABB Ability System 800xA5.1–CNA
ABB Ability System 800xA6.0–CNA
ABB Ability System 800xA6.1–CNA
Compact HMI5.1–CNA
Compact HMI6.0–CNA
Control Builder Safe1.0–CNA
Control Builder Safe1.1–CNA
Control Builder Safe2.0–CNA
Symphony Plus S+ Operations3 – 3.2–CNA
Symphony Plus S+ Engineering1.1 – 2.2–CNA
Composer Harmony5.1–CNA

Scores by source

ABB (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsearch.abb.com/library/Download.aspx?DocumentID=2PAA121231&LanguageCode=en&DocumentPartId=&Action=Launchrefsearch.abb.com/library/Download.aspx?DocumentID=2PAA121230&LanguageCode=en&DocumentPartId=&Action=Launch