Vulnerability · Published Jun 21, 2024 · Assigned by ABB

CVE-2024-3036Communication DoS vulnerability

Medium 5.7

In plain English

A medium-severity security flaw in 800xA Base from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.3%top 82.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.

Affected products (as reported)

VendorProductVersions
ABB 800xA Base 6.0.0 – through 6.1.1-2

Weakness: CWE-1284 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References