Abb Base Software vulnerabilities

3 known vulnerabilities affecting abb/base_software.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH2

Vulnerabilities

Page 1 of 1

CVE-2021-22277HIGHCVSS 7.5≥ 5.1.0-0, ≤ 5.1.0-3≥ 5.1.1-0, ≤ 5.1.1-4+2 more2022-04-01

CVE-2021-22277 [HIGH] CWE-20 CVE-2021-22277: Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.

CVE-2020-24672CRITICALCVSS 9.8≤ 6.12021-09-08

CVE-2020-24672 [CRITICAL] CWE-345 CVE-2020-24672: A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. This issue affects: .

CVE-2020-8472HIGHCVSS 7.8≤ 6.12020-04-29

CVE-2020-8472 [MEDIUM] CWE-732 CVE-2020-8472: Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated