PT-2025-1842 · Ac500 V3 · Ac500 V3

Published 2025-01-07 · Updated 2025-01-13 · CVE-2024-12429

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AC500 V3 versions prior to 3.8.0

Description An attacker who successfully exploits this issue could grant read access to files. A vulnerability exists in the AC500 V3 version, allowing a successfully authenticated attacker to read system-wide files and configurations.

Recommendations For versions prior to 3.8.0, update the firmware to version 3.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and configurations to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-12429

Affected Products

Ac500 V3

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-12429 · Security Note
• https://t.me/cvedetector/14586 · Telegram Post
• https://twitter.com/CyberDanube/status/1878771649354580314 · Twitter Post
• https://twitter.com/CVEnew/status/1876890093405036799 · Twitter Post
• https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• http://seclists.org/fulldisclosure/2025/Jan/5 · Note