Lucene search

K
vulnrichmentABBVULNRICHMENT:CVE-2024-3036
HistoryJun 21, 2024 - 10:26 a.m.

CVE-2024-3036 Communication DoS vulnerability

2024-06-2110:26:30
CWE-20
ABB
github.com
5
improper input validation
abb 800xa base
communication dos
cve-2024-3036
crafted messages

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS4

6.9

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N/S:N/AU:Y/R:A/V:D/RE:M

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Improper Input Validation vulnerability in ABB 800xA Base.
An attacker who successfully exploited this
vulnerability could cause services to crash by sending specifically crafted messages.
This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.

CNA Affected

[
  {
    "vendor": "ABB",
    "product": "800xA Base",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom",
        "lessThanOrEqual": "6.1.1-2"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS4

6.9

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N/S:N/AU:Y/R:A/V:D/RE:M

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-3036