CVE-2020-11640

published 2024-07-23

CVE-2020-11640: AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any…

Priority P3 53 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the
command queue can use it to launch an attack by running any executable on the AdvaBuild node. The
executables that can be run are not limited to AdvaBuild specific executables.

Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
abb	advabuild	—	—
abb	advabuild	>= 3.0 < 3.7	3.7
abb	advant_mod_300_advabuild	3.0 – 3.7 SP2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269