CVE-2024-4009

Published: Jun 5, 2024Modified: Jun 17, 2026

7.3

Vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:D/RE:M/U:Green

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:D/RE:M/U:GreenShow less

Source: cybersecurity@ch.abb.com (Secondary)

Description

Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System

Affected (5)

Products: Abb: 2tma310010b0001 Firmware, 2tma310011b0001 Firmware, 2tma310011b0002 Firmware, 2tma310010b0003 Firmware, 2tma310011b0003 Firmware

Abb

5 products

2tma310010b0001 Firmware

2tma310011b0001 Firmware

2tma310011b0002 Firmware

2tma310010b0003 Firmware

2tma310011b0003 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310010b0001 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310010b0001	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310011b0001 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310011b0001	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310011b0002 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310011b0002	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310010b0003 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310010b0003	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb 2tma310011b0003 Firmware	Before 1.02

Running on/with	Platform Versions
Abb 2tma310011b0003	All versions

Related CWEs

CWE-294

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (2)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch

Source: cybersecurity@ch.abb.com

Vendor Advisory

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.