Medium severity5.5NVD Advisory· Published Apr 29, 2020· Updated Jun 17, 2026

CVE-2020-8472

Description

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.

Affected products

Abb/Base Software
cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*
Range: <=6.1
Abb/Control Builder M
cpe:2.3:a:abb:control_builder_m:*:*:*:*:professional:*:*:*
Range: <=6.1
Abb/Mms Server
cpe:2.3:a:abb:mms_server:*:*:*:*:*:*:*:*
Range: <=6.1
Abb/Opc Server
cpe:2.3:a:abb:opc_server:*:*:*:*:*:*:*:*
Range: <=6.0
Abb/OPCServer for AC800Mllm-create3 versions
<=6.0+ 2 more
- (no CPE)range: <=6.0
- (no CPE)range: 6.1 and earlier
- (no CPE)range: 6.0 and earlier
Abb/Base Software for SoftControlllm-fuzzy2 versions
<=6.1+ 1 more
- (no CPE)range: <=6.1
- (no CPE)range: 6.1 and earlier
Abb/System 800xAllm-fuzzy
Range: <=6.0
Abb/Control Builder M Professionalcpe-rescue
Range: 6.1 and earlier

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-8472

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions