CVE-2024-4008

Published: Jun 5, 2024Modified: Jun 17, 2026

7.3

Vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:D/RE:M/U:Green

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:D/RE:M/U:GreenShow less

Source: cybersecurity@ch.abb.com (Secondary)

Description

FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System

Affected (5)

Products: Abb: 2tma310010b0001 Firmware, 2tma310011b0001 Firmware, 2tma310011b0002 Firmware, 2tma310010b0003 Firmware, 2tma310011b0003 Firmware

Abb

5 products

2tma310010b0001 Firmware

2tma310011b0001 Firmware

2tma310011b0002 Firmware

2tma310010b0003 Firmware

2tma310011b0003 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310010b0001 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310010b0001	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310011b0001 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310011b0001	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310011b0002 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310011b0002	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310010b0003 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310010b0003	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310011b0003 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310011b0003	All versions

Related CWEs

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (2)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch

Source: cybersecurity@ch.abb.com

Vendor Advisory

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.