Approved changes feed: RSS · Atom

cpe:2.3:a:abb:base_software_for_softcontrol:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAbb (6be1db4f-4f59-5a03-a118-0ff43377170e)
ProductBase Software For Softcontrol (d5ceab36-7c9d-5270-913b-afb4a35111cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8478 vulnerable 2026-06-08 05:27:16.620518 ABB System 800xA Inter process communication vulnerability
MEDIUM (5.3)
Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.
Published: 2020-04-29T01:58:54.000Z
Updated: 2024-08-04T10:03:44.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8472 vulnerable 2026-06-08 05:27:16.591751 ABB System 800xA Weak File Permissions - different products
MEDIUM (5.5)
Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.
Published: 2020-04-28T23:52:41.000Z
Updated: 2024-08-04T10:03:45.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24672 vulnerable 2026-06-08 05:22:35.293986 ABB Base Software for SoftControl Remote Code Execution vulnerability
CRITICAL (9.8)
A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. This issue affects: .
Published: 2021-09-08T15:03:55.810Z
Updated: 2024-09-17T00:50:49.998Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.