VulnerabilityDeferred

CVE-2024-8036

ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE.

MEDIUM 4.6EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.

CVSS 4.0: 4.6 MEDIUMCVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.15% probability · 4th percentile
CISA KEV: Not listed
Weakness: CWE-347
Source: cybersecurity@ch.abb.com

References

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911&LanguageCode=en&DocumentPartId=&Action=Launch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.