Use of Hard-coded Credentials in ABB FLXEON Products
CVE-2024-48842

7.3HIGH

Key Information:

Vendor

Abb

Status
Flxeon
Vendor
CVE Published:
17 September 2025

What is CVE-2024-48842?

A vulnerability exists in the ABB FLXEON product line where hard-coded credentials are utilized, potentially allowing unauthorized access. This issue affects versions through 9.3.5 and newer, necessitating prompt attention from users to mitigate risks associated with compromised authentication mechanisms.

Affected Version(s)

FLXEON 0 <= 9.3.5

References

https://search.abb.com/library/Download.aspx?DocumentID=9...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure.
JSON
.