EUVD-2024-50851

Malicious code in bioql PyPI...

ABB AC500v3 3.7.0.569 Directory Traversal / Privilege Escalation Exploit

------------------------------------------------------------------------------- title| Multiple Vulnerabilities in ABB AC500v3 product| ABB AC500v3 vulnerable version| =3.7.0.569 fixed version| 3.8.0 CVE number| CVE-2024-12429, CVE-2024-12430 impact| High homepage| https://global.abb found|...

CVE-2024-12429

An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration All AC500 V3 products PM5xxx with...

CVE-2024-12429

An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration All AC500 V3 products PM5xxx with...

CVE-2024-12429

ABB AC500v3 (PM5xxx) firmware versions earlier than 3.8.0 are affected by CVE-2024-12429 (directory traversal) that allows read access to system-wide files and configuration. A following CVE-2024-12430 enables command execution after exploiting CVE-12429, with root-level execution possible via a ...

CVE-2024-12429

creationtimestamp| type| source ---|---|--- 2025-01-07 16:43:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113788073102479974 2025-01-07 16:55:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113788120858254362 2025-01-07 17:15:40+00:00| seen|...