← CVE Intelligence

CVE-2020-11640

Elevation of Privilege PUBLISHED

Description (CNA)

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables.  Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.

Affected (CNA)

Vendor / productVersions
ABB / Advant MOD 300 AdvaBuildaffected 3.0 through 3.7 SP2

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.