Read the docs
TI-2020-06806 Aliases CVE-2020-8479GHSA-37mh-m4cp-8v5p

ABB Central Licensing System - XML External Entity Injection

Priority MEDIUM 46CWE-91Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability™ System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, ABB AbilityTM SCADAvantage versions 5.1 to 5.6.5. an XML External Entity Injection vulnerability exists that allows an attacker to read or call arbitrary files from the license server and/or from the network and also block the license handling.

Why it matters now

EPSS 0.02259 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBCentral Licensing System5.1 and later—No fix listedCNA
ABBABB Ability System 800xA5.1; 6.0; 6.1—No fix listedCNA
ABBCompact HMI5.1; 6.0—No fix listedCNA
ABBControl Builder Safe1.0; 1.1; 2.0—No fix listedCNA
ABBSymphony Plus S+ Operations3 – 3.2—No fix listedCNA
ABBSymphony Plus S+ Engineering1.1 – 2.2—No fix listedCNA
ABBComposer Harmony5.1; 6.0; 6.1—No fix listedCNA
ABBComposer Melody5.3; 6 – 6.3—No fix listedCNA
ABBHarmony OPC Server Standalone6.0; 6.1; 7.0—No fix listedCNA
ABBAdvant OCS Control Builder A1.3; 1.4—No fix listedCNA
ABBComposer CTK6.1; 6.2—No fix listedCNA
ABBAdvaBuild3.7 SP1; 3.7 SP2—No fix listedCNA
ABBOPC Server for Mod 300 (non-800xA)1.4—No fix listedCNA
ABBOPC Data Link2.1; 2.2—No fix listedCNA
ABBKnowledge Manager8.0; 9.0; 9.1—No fix listedCNA
ABBManufacturing Operations Management1812; 1909—No fix listedCNA
ABBAdvant OCS AC 100 OPS Server5.1; 6.0; 6.1—No fix listedCNA
ABBABB Ability™ SCADAvantage5.1 and later; up to 5.6.5—No fix listedCNA
  • Central Licensing System VendorABB Affected 5.1 and later Fixed in — No fix listed CNA
  • ABB Ability System 800xA VendorABB Affected 5.1; 6.0; 6.1 Fixed in — No fix listed CNA
  • Compact HMI VendorABB Affected 5.1; 6.0 Fixed in — No fix listed CNA
  • Control Builder Safe VendorABB Affected 1.0; 1.1; 2.0 Fixed in — No fix listed CNA
  • Symphony Plus S+ Operations VendorABB Affected 3 – 3.2 Fixed in — No fix listed CNA
  • Symphony Plus S+ Engineering VendorABB Affected 1.1 – 2.2 Fixed in — No fix listed CNA
  • Composer Harmony VendorABB Affected 5.1; 6.0; 6.1 Fixed in — No fix listed CNA
  • Composer Melody VendorABB Affected 5.3; 6 – 6.3 Fixed in — No fix listed CNA
  • Harmony OPC Server Standalone VendorABB Affected 6.0; 6.1; 7.0 Fixed in — No fix listed CNA
  • Advant OCS Control Builder A VendorABB Affected 1.3; 1.4 Fixed in — No fix listed CNA
  • Composer CTK VendorABB Affected 6.1; 6.2 Fixed in — No fix listed CNA
  • AdvaBuild VendorABB Affected 3.7 SP1; 3.7 SP2 Fixed in — No fix listed CNA
  • OPC Server for Mod 300 (non-800xA) VendorABB Affected 1.4 Fixed in — No fix listed CNA
  • OPC Data Link VendorABB Affected 2.1; 2.2 Fixed in — No fix listed CNA
  • Knowledge Manager VendorABB Affected 8.0; 9.0; 9.1 Fixed in — No fix listed CNA
  • Manufacturing Operations Management VendorABB Affected 1812; 1909 Fixed in — No fix listed CNA
  • Advant OCS AC 100 OPS Server VendorABB Affected 5.1; 6.0; 6.1 Fixed in — No fix listed CNA
  • ABB Ability™ SCADAvantage VendorABB Affected 5.1 and later; up to 5.6.5 Fixed in — No fix listed CNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:a:abb:800xa_system:5.1:-:*:*:*:*:*:*5.1VulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:feature_pack_4:*:*:*:*:*:*5.1 feature_pack_4VulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:feature_pack_4_revision_d:*:*:*:*:*:*5.1 feature_pack_4_revision_dVulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:revision_a:*:*:*:*:*:*5.1 revision_aVulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:revision_b:*:*:*:*:*:*5.1 revision_bVulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:revision_c:*:*:*:*:*:*5.1 revision_cVulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:revision_d:*:*:*:*:*:*5.1 revision_dVulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:revision_e:*:*:*:*:*:*5.1 revision_eVulnerableABB
cpe:2.3:a:abb:800xa_system:5.1:revision_e_feature_pack_4:*:*:*:*:*:*5.1 revision_e_feature_pack_4VulnerableABB
cpe:2.3:a:abb:800xa_system:6.0:*:*:*:*:*:*:*6.0VulnerableABB
  • cpe:2.3:a:abb:800xa_system:5.1:-:*:*:*:*:*:* Versions 5.1 Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:feature_pack_4:*:*:*:*:*:* Versions 5.1 feature_pack_4 Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:feature_pack_4_revision_d:*:*:*:*:*:* Versions 5.1 feature_pack_4_revision_d Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:revision_a:*:*:*:*:*:* Versions 5.1 revision_a Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:revision_b:*:*:*:*:*:* Versions 5.1 revision_b Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:revision_c:*:*:*:*:*:* Versions 5.1 revision_c Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:revision_d:*:*:*:*:*:* Versions 5.1 revision_d Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:revision_e:*:*:*:*:*:* Versions 5.1 revision_e Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:5.1:revision_e_feature_pack_4:*:*:*:*:*:* Versions 5.1 revision_e_feature_pack_4 Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·ABB
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:abb:800xa_system:6.0.1:*:*:*:*:*:*:*6.0.1VulnerableABB
cpe:2.3:a:abb:800xa_system:6.0.3:*:*:*:*:*:*:*6.0.3VulnerableABB
cpe:2.3:a:abb:800xa_system:6.1:*:*:*:*:*:*:*6.1VulnerableABB
cpe:2.3:a:abb:compact_hmi:5.1:-:*:*:*:*:*:*5.1VulnerableABB
cpe:2.3:a:abb:compact_hmi:5.1:feature_pack_4_revision_d:*:*:*:*:*:*5.1 feature_pack_4_revision_dVulnerableABB
cpe:2.3:a:abb:compact_hmi:5.1:revision_b:*:*:*:*:*:*5.1 revision_bVulnerableABB
cpe:2.3:a:abb:compact_hmi:5.1:revision_d:*:*:*:*:*:*5.1 revision_dVulnerableABB
cpe:2.3:a:abb:compact_hmi:6.0.1-1:*:*:*:*:*:*:*6.0.1-1VulnerableABB
cpe:2.3:a:abb:compact_hmi:6.0.3-2:*:*:*:*:*:*:*6.0.3-2VulnerableABB
cpe:2.3:a:abb:control_builder_safe:1.0:*:*:*:*:*:*:*1.0VulnerableABB
cpe:2.3:a:abb:control_builder_safe:1.1:*:*:*:*:*:*:*1.1VulnerableABB
cpe:2.3:a:abb:control_builder_safe:2.0:*:*:*:*:*:*:*2.0VulnerableABB
  • cpe:2.3:a:abb:800xa_system:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:6.0.3:*:*:*:*:*:*:* Versions 6.0.3 Vulnerable ·ABB
  • cpe:2.3:a:abb:800xa_system:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·ABB
  • cpe:2.3:a:abb:compact_hmi:5.1:-:*:*:*:*:*:* Versions 5.1 Vulnerable ·ABB
  • cpe:2.3:a:abb:compact_hmi:5.1:feature_pack_4_revision_d:*:*:*:*:*:* Versions 5.1 feature_pack_4_revision_d Vulnerable ·ABB
  • cpe:2.3:a:abb:compact_hmi:5.1:revision_b:*:*:*:*:*:* Versions 5.1 revision_b Vulnerable ·ABB
  • cpe:2.3:a:abb:compact_hmi:5.1:revision_d:*:*:*:*:*:* Versions 5.1 revision_d Vulnerable ·ABB
  • cpe:2.3:a:abb:compact_hmi:6.0.1-1:*:*:*:*:*:*:* Versions 6.0.1-1 Vulnerable ·ABB
  • cpe:2.3:a:abb:compact_hmi:6.0.3-2:*:*:*:*:*:*:* Versions 6.0.3-2 Vulnerable ·ABB
  • cpe:2.3:a:abb:control_builder_safe:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·ABB
  • cpe:2.3:a:abb:control_builder_safe:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·ABB
  • cpe:2.3:a:abb:control_builder_safe:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·ABB

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    ABB Central Licensing System 5*

    5 records Highest priority Priority MEDIUM 2 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2020-06807 ABB Central Licensing System - Information disclosurePriority MEDIUM 46
    • TI-2020-06803 ABB Central Licensing System - Elevation of Privilege VulnerabilityPriority LOW 36
    • TI-2020-06802 ABB Central Licensing System - Denial of Service VulnerabilityPriority LOW 35
    Show all 5 records →
  • Release ·

    ABB Ability™ SCADAvantage unspecified

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2020-06803 ABB Central Licensing System - Elevation of Privilege VulnerabilityPriority LOW 36
    • TI-2020-06802 ABB Central Licensing System - Denial of Service VulnerabilityPriority LOW 35
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-8479
  2. 2026-10-03 Alias added: GHSA-37mh-m4cp-8v5p

References

Advisory 2

Other 1

  • TI-2020-06807 ABB Central Licensing System - Information disclosure CVSS 3.1CRITICAL 9.8
  • TI-2020-06803 ABB Central Licensing System - Elevation of Privilege Vulnerability CVSS 3.1HIGH 7.5
  • TI-2020-06802 ABB Central Licensing System - Denial of Service Vulnerability CVSS 3.1HIGH 7.5
  • TI-2020-06798 ABB Central Licensing System - Weak File Permissions CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences