GCVE - cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:abb:base_software:*:*:*:*:*:softcontrol:*:*

part: a version: * update: *

Vendor	Abb (`6be1db4f-4f59-5a03-a118-0ff43377170e`)
Product	Base Software (`b094fa72-63b5-56f0-bee9-e479e3cd17e2`)
Edition	*
Language	*
Software edition	*
Target software	softcontrol
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-22277`	vulnerable	2026-06-08 05:30:00.087420	AC 800M MMS - Denial of Service vulnerability in MMS communication HIGH (7.5) Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service. Published: 2022-04-01T22:17:43.044Z Updated: 2024-09-17T01:41:41.993Z Open on db.gcve.eu Reference links https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8478`	vulnerable	2026-06-08 05:27:16.620775	ABB System 800xA Inter process communication vulnerability MEDIUM (5.3) Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder. Published: 2020-04-29T01:58:54.000Z Updated: 2024-08-04T10:03:44.802Z Open on db.gcve.eu Reference links https://search.abb.com/library/Download.aspx?DocumentID=2PAA121236&LanguageCode=en&DocumentPartId=&Action=Launch	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8472`	vulnerable	2026-06-08 05:27:16.595017	ABB System 800xA Weak File Permissions - different products MEDIUM (5.5) Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications. Published: 2020-04-28T23:52:41.000Z Updated: 2024-08-04T10:03:45.938Z Open on db.gcve.eu Reference links https://search.abb.com/library/Download.aspx?DocumentID=2PAA121106&LanguageCode=en&DocumentPartId=&Action=Launch	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24672`	vulnerable	2026-06-08 05:22:35.294582	ABB Base Software for SoftControl Remote Code Execution vulnerability CRITICAL (9.8) A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. This issue affects: . Published: 2021-09-08T15:03:55.810Z Updated: 2024-09-17T00:50:49.998Z Open on db.gcve.eu Reference links https://search.abb.com/library/Download.aspx?DocumentID=2PAA122974&LanguageCode=en&DocumentPartId=&Action=Launch	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.