Abb Base Software vulnerabilities

4 CVEs affecting Abb Base Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22277, published 2022-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22277, published 2022-04-01. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker…
CVE-2020-24672, published 2021-09-08. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. This issue affects: .
CVE-2020-8478, published 2020-04-29. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published…
CVE-2020-8472, published 2020-04-29. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base…