A
dvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables. Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.
References
Configurations
Configuration 1 (hide)
|
History
19 Dec 2025, 15:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://search.abb.com/library/Download.aspx?DocumentID=3BUA003421&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.200044199.882581162.1721753430-284724496.1718609177 - Vendor Advisory | |
| First Time |
Abb
Abb advabuild |
|
| CPE | cpe:2.3:a:abb:advabuild:3.7:sp2:*:*:*:advant_mod_300:*:* cpe:2.3:a:abb:advabuild:*:*:*:*:*:advant_mod_300:*:* cpe:2.3:a:abb:advabuild:3.7:-:*:*:*:advant_mod_300:*:* cpe:2.3:a:abb:advabuild:3.7:sp1:*:*:*:advant_mod_300:*:* |
21 Nov 2024, 04:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://search.abb.com/library/Download.aspx?DocumentID=3BUA003421&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.200044199.882581162.1721753430-284724496.1718609177 - |
24 Jul 2024, 12:55
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-23 18:15
Updated : 2025-12-19 15:57
NVD link : CVE-2020-11640
Mitre link : CVE-2020-11640
CVE.ORG link : CVE-2020-11640
JSON object : View
CWE
CWE-269
Improper Privilege Management