ICSA-20-154-04

icsaUScisa_csaf_ot

ABB Central Licensing System

view advisory published 2020-06-02

Successful exploitation of these vulnerabilities could allow an attacker to take control of the affected system node remotely and cause an affected CLS Server node to stop or prevent legitimate access to the affected CLS Server.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2020-8481UScritical9.8—
For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphon…
CVE-2020-8479UScritical9.8—
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0,…
CVE-2020-8476UShigh7.5—
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0,…
CVE-2020-8475UShigh7.5—
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0,…
CVE-2020-8471UShigh7.8OT elevated—
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0,…
02

references

External citations — patches, advisories, analysis.

03

remediations (80)

  • MitigationABB Ability Knowledge Manager

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Knowledge Manager

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Knowledge Manager

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Knowledge Manager

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Knowledge Manager

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Manufacturing Operations Management

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Manufacturing Operations Management

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Manufacturing Operations Management

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Manufacturing Operations Management

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Manufacturing Operations Management

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Engineering

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Engineering

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Engineering

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Engineering

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Engineering

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Operations

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Operations

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Operations

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Operations

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability Symphony Plus - S+ Operations

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA / Advant OCS Control Builder A

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA / Advant OCS Control Builder A

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA / Advant OCS Control Builder A

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA / Advant OCS Control Builder A

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA / Advant OCS Control Builder A

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA and related system extensions

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA and related system extensions

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA and related system extensions

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA and related system extensions

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationABB Ability System 800xA and related system extensions

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvaBuild

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvaBuild

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvaBuild

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvaBuild

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvaBuild

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvant OCS AC 100 OPC Server

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvant OCS AC 100 OPC Server

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvant OCS AC 100 OPC Server

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvant OCS AC 100 OPC Server

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationAdvant OCS AC 100 OPC Server

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationCompact HMI

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationCompact HMI

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationCompact HMI

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationCompact HMI

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationCompact HMI

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer CTK

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer CTK

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer CTK

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer CTK

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer CTK

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Harmony

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Harmony

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Harmony

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Harmony

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Harmony

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Melody (incl. SPE for Melody 1.0 SPx)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Melody (incl. SPE for Melody 1.0 SPx)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Melody (incl. SPE for Melody 1.0 SPx)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Melody (incl. SPE for Melody 1.0 SPx)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationComposer Melody (incl. SPE for Melody 1.0 SPx)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationControl Builder Safe

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationControl Builder Safe

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationControl Builder Safe

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationControl Builder Safe

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationControl Builder Safe

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationHarmony OPC Server (HAOPC)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationHarmony OPC Server (HAOPC)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationHarmony OPC Server (HAOPC)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationHarmony OPC Server (HAOPC)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationHarmony OPC Server (HAOPC)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Data Link

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Data Link

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Data Link

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Data Link

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Data Link

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Server MOD 300 (non-800xA)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Server MOD 300 (non-800xA)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Server MOD 300 (non-800xA)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Server MOD 300 (non-800xA)

    Ensure only authorized individuals have access to user accounts on the system nodes.

  • MitigationOPC Server MOD 300 (non-800xA)

    Ensure only authorized individuals have access to user accounts on the system nodes.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan