CVE-2020-11640
High
Description
AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables. Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAbb Advabuild
PublishedJul 23, 2024
First seenJul 23, 2024
Weakness typeCWE-269Improper privilege management
How to fix
Update
- abb advabuild3.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb advabuild | 3.0 ≤ v < 3.7, 3.7 | 3.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.