Vulnerability Details : CVE-2020-11640
AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the
command queue can use it to launch an attack by running any executable on the AdvaBuild node. The
executables that can be run are not limited to AdvaBuild specific executables.
Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.
Products affected by CVE-2020-11640
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2020-11640
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 38 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-11640
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
N/A
|
N/A
|
Asea Brown Boveri Ltd. (ABB) | 2024-07-23 |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
Asea Brown Boveri Ltd. (ABB) | 2024-07-23 |
CWE ids for CVE-2020-11640
-
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.Assigned by:
- 2b718523-d88f-4f37-9bbd-300c20644bf9 (Primary)
- cybersecurity@ch.abb.com (Primary)
References for CVE-2020-11640
Jump to