Lucene search

K
cve[email protected]CVE-2024-3036
HistoryJun 21, 2024 - 11:15 a.m.

CVE-2024-3036

2024-06-2111:15:12
CWE-20
web.nvd.nist.gov
21
cve-2024-3036
abb 800xa base
improper input validation

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

CVSS4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N/S:N/AU:Y/R:A/V:D/RE:M

0.0004 Low

EPSS

Percentile

9.1%

Improper Input Validation vulnerability in ABB 800xA Base.
An attacker who successfully exploited this
vulnerability could cause services to crash by sending specifically crafted messages.
This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "800xA Base",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "6.1.1-2",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      }
    ]
  }
]

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

CVSS4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N/S:N/AU:Y/R:A/V:D/RE:M

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-3036