ABB Device Library Wizard Information Disclosure Vulnerability Advisory (CVE-2020-8482)

This cybersecurity advisory details an information disclosure vulnerability (CVE-2020-8482) in ABB Device Library Wizard versions 6.0.X, 6.0.3.1, and 6.0.3.2, which allows low-privileged users to read confidential data and potentially take control of system nodes. ABB recommends applying the corrected versions (6.0.3.2 RU1, 6.0.3.3, or 6.1.X onwards) and disabling interactive logon for service accounts as immediate mitigation.