Vulnerabilities > ABB > Base Software
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-01 | CVE-2021-22277 | Improper Input Validation vulnerability in ABB products Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service. | 7.5 |
| 2021-09-08 | CVE-2020-24672 | Improper Input Validation vulnerability in ABB Base Software A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. | 9.8 |
| 2020-04-29 | CVE-2020-8478 | Injection vulnerability in ABB Base Software, MMS Server and OPC Server Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder. | 3.3 |
| 2020-04-29 | CVE-2020-8472 | Incorrect Permission Assignment for Critical Resource vulnerability in ABB products Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. | 7.8 |