Vulnerability · Published Jan 27, 2025 · Assigned by ABB
CVE-2024-48841Remote Code Execution (RCE) Vulnerabilities
Critical 10.0
In plain English
A critical-severity command injection in FLXEON from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.4% (higher than 91% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)4.4%top 8.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H