CVE-2024-48841 Remote Code Execution (RCE) Vulnerabilities

🗓️ 27 Jan 2025 19:25:44Reported by ABBType

CVE-2024-48841 allows remote code execution via network access in FLXEON 9.3.4 and older.

Reporter	Title	Published	Views	Family All 26
0day.today	ABB Cylon FLXeon 9.3.4 login.js Unauthenticated Root Remote Code Execution Exploit	3 Feb 202500:00	–	zdt
0day.today	ABB Cylon FLXeon 9.3.4 cmds.js Authenticated Root Remote Code Execution Exploit	3 Feb 202500:00	–	zdt
0day.today	ABB Cylon FLXeon 9.3.4 upload.js Authenticated Root Remote Code Execution Exploit	3 Feb 202500:00	–	zdt
0day.today	ABB Cylon FLXeon 9.3.4 timeConfig.js Authenticated Root Remote Code Execution Exploit	3 Feb 202500:00	–	zdt
BDU FSTEC	The vulnerability of microprogrammed programmable logic controllers ABB FBXi, FBVi, FBTi, and CBXi arises from incorrect handling of file names for PHP functions like include or require. This allows attackers to exploit their privileges and execute arbitrary code.	10 Feb 202500:00	–	bdu_fstec
Circl	CVE-2024-48841	27 Jan 202520:16	–	circl
CNNVD	ABB FLXeon 安全漏洞	27 Jan 202500:00	–	cnnvd
CVE	CVE-2024-48841	27 Jan 202519:25	–	cve
Exploit DB	ABB Cylon FLXeon 9.3.4 - Remote Code Execution (RCE)	11 Apr 202500:00	–	exploitdb
Exploit DB	ABB Cylon FLXeon 9.3.4 - Remote Code Execution (Authenticated)	11 Apr 202500:00	–	exploitdb

[
  {
    "defaultStatus": "unaffected",
    "product": "FLXEON",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "9.3.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

14 Feb 2025 12:28Current

CVSS 410

CVSS 3.110

EPSS0.06246

CWE-77