VulnerabilityDeferred

CVE-2024-48852

Insertion of Sensitive Information into Log File vulnerability observed in FLEXON.

MEDIUM 6.9EPSS 2.45%

Does this matter?

Lower severity and a low EPSS score (2.45%). Track it; it rarely justifies an emergency change on its own.

Description

Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This issue affects FLXEON through <= 9.3.4.

CVSS 4.0: 6.9 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 2.45% probability · 83th percentile
CISA KEV: Not listed
Weakness: CWE-532
Source: cybersecurity@ch.abb.com

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108470A5684&LanguageCode=en&DocumentPartId=PDF&Action=Launch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.