PT-2024-6749 · Abb · Abb 800Xa Base

Published 2024-06-05 · Updated 2025-09-08 · CVE-2024-3036

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:D/RE:M/U:X

Name of the Vulnerable Software and Affected Versions: ABB 800xA Base versions 6.0.0 through 6.1.1-2

Description: The issue is related to improper input validation, which could allow an attacker to cause services to crash by sending specifically crafted messages. This can be exploited remotely, potentially leading to a denial of service by sending numerous messages.

Recommendations: For ABB 800xA Base versions 6.0.0 through 6.1.1-2, consider implementing input validation mechanisms to prevent the system from processing maliciously crafted messages until a patch is available. As a temporary workaround, restrict access to the system to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-1284

CWE-20

Related Identifiers

BDU:2024-07962

CVE-2024-3036

Affected Products

Abb 800Xa Base

References · 7

• https://search.abb.com/library/Download.aspx?DocumentID=7PAA013309&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3036 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3036 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07962 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-177-01 · Note
• https://search.abb.com/library/Download.aspx?DocumentID=7PAA013309&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/cveNotify/134604 · Telegram Post