{"id":"CVE-2020-8485","aliases":["EUVD-2020-29351","GHSA-86m2-v736-85f5"],"status":"published","title":"ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0034,"percentile":0.27705,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2020-04-29T01:59:04Z","modified":"2026-06-17T03:26:27Z","products":[{"vendor":"abb","product":"800xa"},{"vendor":"abb","product":"800xa for mod300"}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8485"},{"url":"https://github.com/advisories/GHSA-86m2-v736-85f5"}],"sources":{"cve":[{"id":"CVE-2020-8485","title":"ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2020-04-29T01:59:04Z","modified":"2024-08-04T10:03:46.099Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-29351","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2020-04-29T01:59:04Z","modified":"2024-08-04T10:03:46Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:07:57.14802Z"}],"ghsa":[{"id":"GHSA-86m2-v736-85f5","title":"Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD...","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2022-05-24T17:16:56Z","modified":"2023-01-29T05:02:30Z","updated_at":"2026-11-02T14:45:06.209197Z"}],"nvd":[{"id":"CVE-2020-8485","description":"Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.","status":"published","published":"2020-04-29T02:15:12.203Z","modified":"2026-06-17T03:26:27.357Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:05:59.718774Z"}]}}