The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.
References
Link | Resource |
---|---|
https://search.abb.com/library/Download.aspx?DocumentID=2PAA121232&LanguageCode=en&DocumentPartId=&Action=Launch | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-04-22 15:15
Updated : 2024-02-28 17:47
NVD link : CVE-2020-8477
Mitre link : CVE-2020-8477
CVE.ORG link : CVE-2020-8477
JSON object : View
Products Affected
abb
- 800xa_information_manager