DNA View

High Severity Vulnerability

This vulnerability has been rated as High severity. Immediate action is recommended.

CVE-2024-9876

High

Low Medium High Critical

7.3

CVSS Score

Published: Apr 30, 2025

Last Modified: May 02, 2025

CWE: CWE-471

Vulnerability Description

: Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

References & Resources

https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch
cybersecurity@ch.abb.com

Severity Details

7.3

out of 10.0

High

Weakness Type (CWE)

CWE-471

Modification of Assumed-Immutable Data (MAID)

Description: The product does not properly protect an assumed-immutable element from being modified by an attacker.
Typical Severity: Medium
Abstraction Level: Base