PT-2025-18311 · Abb · Abb Anc+2

Published 2025-04-30 · Updated 2025-05-02 · CVE-2024-9876

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ABB ANC versions 1.1.4 and earlier ABB ANC-L versions 1.1.4 and earlier ABB ANC-mini versions 1.1.4 and earlier

Description The issue is related to the modification of assumed-immutable data, referred to as MAID. This problem affects various ABB products, including ANC, ANC-L, and ANC-mini.

Recommendations For ABB ANC version 1.1.4 and earlier, update to a version later than 1.1.4. For ABB ANC-L version 1.1.4 and earlier, update to a version later than 1.1.4. For ABB ANC-mini version 1.1.4 and earlier, update to a version later than 1.1.4.

Fix

Weakness Enumeration

CWE-471

Related Identifiers

CVE-2024-9876

Affected Products

Abb Anc

Abb Anc-L

Abb Anc-Mini

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-9876 · Security Note
• https://twitter.com/CVEnew/status/1917652176794509420 · Twitter Post
• https://t.me/cvedetector/24139 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch · Note
• https://twitter.com/cybercronai/status/1918142402063143196 · Twitter Post