CVE-2020-11640

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables.  Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cybersecurity@ch.abb.com

Published

2024-07-23

Last modified

2024-08-04

Weaknesses

CWE-269

Affected products

• Advabuild (Abb)
• Advant Mod 300 Advabuild (Abb)

References

• https://search.abb.com/library/Download.aspx?DocumentID=3BUA003421&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.…