Vulnerabilities > ABB > Base Software

DATE CVE VULNERABILITY TITLE RISK
2022-04-01 CVE-2021-22277 Improper Input Validation vulnerability in ABB products
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.
network
low complexity
abb CWE-20
7.8
2021-09-08 CVE-2020-24672 Improper Input Validation vulnerability in ABB Base Software
A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product.
network
abb CWE-20
6.8
2020-04-29 CVE-2020-8478 Injection vulnerability in ABB Base Software, MMS Server and OPC Server
Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.
local
low complexity
abb CWE-74
2.1
2020-04-29 CVE-2020-8472 Incorrect Permission Assignment for Critical Resource vulnerability in ABB products
Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files.
local
low complexity
abb CWE-732
6.8