CVE-2008-2474

2008-09-2917:17:29

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.052

Percentile

93.1%

JSON

Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface.

Affected configurations

Nvd

Node

abbpcu400Match4.4

abbpcu400Match4.5

abbpcu400Match4.6

VendorProductVersionCPE
abbpcu4004.4cpe:2.3:h:abb:pcu400:4.4:*:*:*:*:*:*:*
abbpcu4004.5cpe:2.3:h:abb:pcu400:4.5:*:*:*:*:*:*:*
abbpcu4004.6cpe:2.3:h:abb:pcu400:4.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
abb	pcu400	4.4	cpe:2.3:h:abb:pcu400:4.4:::::::*
abb	pcu400	4.5	cpe:2.3:h:abb:pcu400:4.5:::::::*
abb	pcu400	4.6	cpe:2.3:h:abb:pcu400:4.6:::::::*