CVE-2020-11640 Elevation of Privilege
An attacker with command queue access can execute arbitrary executables on the AdvaBuild node, leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11640?
CVE-2020-11640 is a high-severity vulnerability in ABB Advant MOD 300 AdvaBuild, published on 23 Jul 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables.
Improper Privilege Management vulnerability in ABB Advant MOD 300 AdvaBuild.This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2.
Weakness: CWE-269
Which versions are affected by CVE-2020-11640?
It affects 1 product.
Products include Abb Advabuild.
How do I fix CVE-2020-11640?
No fix has been published for CVE-2020-11640 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-11640 being exploited?
There is no known exploitation of CVE-2020-11640 in the wild and no public exploit code.
Other vulnerabilities in ABB Advant MOD 300 AdvaBuild
Sources
Also known as GHSA-6mjp-g2rf-hh5w.