{"id":"CVE-2020-8484","aliases":["EUVD-2020-29350","GHSA-2x2x-f8f2-vqmf"],"status":"published","title":"ABB System 800xA Inter process communication vulnerability - 800xA for DCI","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0034,"percentile":0.27689,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2020-04-29T01:58:57Z","modified":"2026-06-17T03:26:27Z","products":[{"vendor":"abb","product":"800xa"},{"vendor":"abb","product":"800xa for dci"}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8484"},{"url":"https://github.com/advisories/GHSA-2x2x-f8f2-vqmf"}],"sources":{"cve":[{"id":"CVE-2020-8484","title":"ABB System 800xA Inter process communication vulnerability - 800xA for DCI","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2020-04-29T01:58:57Z","modified":"2024-08-04T10:03:45.932Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:35:50.545879Z"}],"euvd":[{"id":"EUVD-2020-29350","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2020-04-29T01:58:57Z","modified":"2024-08-04T10:03:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:07:57.14802Z"}],"ghsa":[{"id":"GHSA-2x2x-f8f2-vqmf","title":"Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI ...","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2022-05-24T17:16:56Z","modified":"2023-01-29T05:02:30Z","updated_at":"2026-11-02T14:45:06.209197Z"}],"nvd":[{"id":"CVE-2020-8484","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2020-04-29T02:15:12.013Z","modified":"2026-06-17T03:26:27.25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:05:59.718774Z"}]}}