VAR-202004-2162

Vulnerability from variot - Updated: 2023-12-18 11:58

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, confidential data is written in an unprotected file. An attacker who successfully exploited this vulnerability could take full control of the computer. plural ABB The product contains a vulnerability related to information leakage.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. ABB Ability System 800xA and others are products of Swiss ABB company. ABB Ability System 800xA is a distributed control system for industrial control industry. ABB Compact HMI is a monitoring and data acquisition system. ABB Control Builder Safe is an engineering tool for configuring and downloading the AC 800M High Integrity security application.

There are information disclosure vulnerabilities in many ABB products. The vulnerability stems from programs writing sensitive information to unprotected files

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202004-2162",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "800xa system",
        "scope": "eq",
        "trust": 1.1,
        "vendor": "abb",
        "version": "5.1"
      },
      {
        "model": "system 800xa",
        "scope": null,
        "trust": 0.8,
        "vendor": "abb",
        "version": null
      },
      {
        "model": "opcserver for ac800m",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "abb",
        "version": "\u003c=6.0"
      },
      {
        "model": "control builder mprofessional",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "abb",
        "version": "\u003c=6.0"
      },
      {
        "model": "mmsserver for ac800m",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "abb",
        "version": "\u003c=6.0"
      },
      {
        "model": "base software for softcontrol",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "abb",
        "version": "\u003c=6.0"
      },
      {
        "model": "ability system 800xa and related system extensions",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "5.1"
      },
      {
        "model": "ability system 800xa and related system extensions",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.0"
      },
      {
        "model": "ability system 800xa and related system extensions",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.1"
      },
      {
        "model": "compact hmi",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "5.1"
      },
      {
        "model": "compact hmi",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.0"
      },
      {
        "model": "control builder safe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1.0"
      },
      {
        "model": "control builder safe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1.1"
      },
      {
        "model": "control builder safe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "2.0"
      },
      {
        "model": "ability symphony plus s+ operations",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "-\u003e=3.0,\u003c=3.2"
      },
      {
        "model": "ability symphony plus s+ engineering",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "-\u003e=1.1,\u003c=2.2"
      },
      {
        "model": "composer harmony",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "5.1"
      },
      {
        "model": "composer harmony",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.0"
      },
      {
        "model": "composer harmony",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.1"
      },
      {
        "model": "composer melody",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1.05.3"
      },
      {
        "model": "composer melody",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1.06.1"
      },
      {
        "model": "composer melody",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1.06.2"
      },
      {
        "model": "composer melody",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1.06.3"
      },
      {
        "model": "harmony opc server",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.0"
      },
      {
        "model": "harmony opc server",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.1"
      },
      {
        "model": "harmony opc server",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "7.0"
      },
      {
        "model": "ability system 800xa advant ocs control builder a",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "/1.3"
      },
      {
        "model": "ability system 800xa advant ocs control builder a",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "/1.4"
      },
      {
        "model": "advant ocs ac opc server",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1005.1"
      },
      {
        "model": "advant ocs ac opc server",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1006.0"
      },
      {
        "model": "advant ocs ac opc server",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1006.1"
      },
      {
        "model": "composer ctk",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.1"
      },
      {
        "model": "composer ctk",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "6.2"
      },
      {
        "model": "advabuild sp1",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "3.7"
      },
      {
        "model": "advabuild sp2",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "3.7"
      },
      {
        "model": "opc server mod",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "3001.4"
      },
      {
        "model": "opc data link",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "2.1"
      },
      {
        "model": "opc data link",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "2.2"
      },
      {
        "model": "ability knowledge manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "8.0"
      },
      {
        "model": "ability knowledge manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "9.0"
      },
      {
        "model": "ability knowledge manager",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "9.1"
      },
      {
        "model": "ability manufacturing operations management",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1812"
      },
      {
        "model": "ability manufacturing operations management",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "abb",
        "version": "1909"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:abb:800xa_system:5.1:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      }
    ]
  },
  "cve": "CVE-2020-8481",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 10.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "JVNDB-2020-005100",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2020-32228",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "VHN-186606",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULMON",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2020-8481",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "HIGH",
            "trust": 0.1,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 2.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2020-005100",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2020-8481",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "cybersecurity@ch.abb.com",
            "id": "CVE-2020-8481",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "JVNDB-2020-005100",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2020-32228",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202004-2370",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-186606",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2020-8481",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "For ABB products ABB Ability\u2122 System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability\u2122 System 800xA/ Advant\u00ae OCS Control Builder A 1.3 and 1.4, Advant\u00ae OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, confidential data is written in an unprotected file. An attacker who successfully exploited this vulnerability could take full control of the computer. plural ABB The product contains a vulnerability related to information leakage.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. ABB Ability System 800xA and others are products of Swiss ABB company. ABB Ability System 800xA is a distributed control system for industrial control industry. ABB Compact HMI is a monitoring and data acquisition system. ABB Control Builder Safe is an engineering tool for configuring and downloading the AC 800M High Integrity security application. \n\r\n\r\nThere are information disclosure vulnerabilities in many ABB products. The vulnerability stems from programs writing sensitive information to unprotected files",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481"
      }
    ],
    "trust": 2.34
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-8481",
        "trust": 3.2
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-20-154-04",
        "trust": 2.0
      },
      {
        "db": "JVN",
        "id": "JVNVU94921886",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228",
        "trust": 0.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.1926",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ]
  },
  "id": "VAR-202004-2162",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      }
    ],
    "trust": 1.5973266515789475
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      }
    ]
  },
  "last_update_date": "2023-12-18T11:58:27.793000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SECURITY ABB Central Licensing System Vulnerabilities, impact on System 800xA, Compact HMI and Control Builder Safe",
        "trust": 0.8,
        "url": "https://search.abb.com/library/download.aspx?documentid=2paa121230\u0026languagecode=en\u0026documentpartid=\u0026action=launch"
      },
      {
        "title": "SECURITY Multiple Vulnerabilities in ABB Central Licensing System",
        "trust": 0.8,
        "url": "https://search.abb.com/library/download.aspx?documentid=2paa121231\u0026languagecode=en\u0026documentpartid=\u0026action=launch"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-922",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-200",
        "trust": 0.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.0,
        "url": "https://www.us-cert.gov/ics/advisories/icsa-20-154-04"
      },
      {
        "trust": 1.7,
        "url": "https://search.abb.com/library/download.aspx?documentid=2paa121230\u0026languagecode=en\u0026documentpartid=\u0026action=launch"
      },
      {
        "trust": 1.7,
        "url": "https://search.abb.com/library/download.aspx?documentid=2paa121231\u0026languagecode=en\u0026documentpartid=\u0026action=launch"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-8481"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-8481"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94921886/index.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.1926/"
      },
      {
        "trust": 0.1,
        "url": "https://search.abb.com/library/download.aspx?documentid=2paa121230\u0026amp;languagecode=en\u0026amp;documentpartid=\u0026amp;action=launch"
      },
      {
        "trust": 0.1,
        "url": "https://search.abb.com/library/download.aspx?documentid=2paa121231\u0026amp;languagecode=en\u0026amp;documentpartid=\u0026amp;action=launch"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/200.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2020-06-10T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "date": "2020-04-29T00:00:00",
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "date": "2020-04-29T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "date": "2020-06-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "date": "2020-04-29T02:15:11.907000",
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "date": "2020-04-28T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2020-06-10T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2020-32228"
      },
      {
        "date": "2021-09-14T00:00:00",
        "db": "VULHUB",
        "id": "VHN-186606"
      },
      {
        "date": "2020-05-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-8481"
      },
      {
        "date": "2020-06-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      },
      {
        "date": "2021-09-14T14:00:32.383000",
        "db": "NVD",
        "id": "CVE-2020-8481"
      },
      {
        "date": "2021-09-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  ABB Information leakage vulnerabilities in products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005100"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "information disclosure",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202004-2370"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…