Skip to content

Product

ABB advabuild vulnerabilities

7 published CVES affecting ABB advabuild, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
7
Critical
2
High
5
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest ABB advabuild CVEs

Newest publication first

  1. CVE-2020-11640 Elevation of Privilege

    Published
    HighCVSS 8.8 EPSS 0.37%

    AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables. Improp...

  2. CVE-2020-11639 Insufficient access control on Inter process communication,

    Published
    HighCVSS 7.8 EPSS 0.13%

    An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data injected each process might be affected differently. The process could crash or cause communication issues on the affected node, effectively causing a denial-of-...

  3. CVE-2020-8481 ABB Central Licensing System - Information disclosure

    Published
    CriticalCVSS 9.8 EPSS 1.9%

    For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0...

  4. CVE-2020-8471 ABB Central Licensing System - Weak File Permissions

    Published
    HighCVSS 7.8 EPSS 0.37%

    For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ En...

  5. CVE-2020-8479 ABB Central Licensing System - XML External Entity Injection

    Published
    CriticalCVSS 9.8 EPSS 2.3%

    For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ En...

  6. CVE-2020-8476 ABB Central Licensing System - Elevation of Privilege Vulnerability

    Published
    HighCVSS 7.5 EPSS 1.5%

    For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ En...

  7. CVE-2020-8475 ABB Central Licensing System - Denial of Service Vulnerability

    Published
    HighCVSS 7.5 EPSS 1.2%

    For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ En...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.