MAID Vulnerability in ABB ANC, ANC-L, and ANC-mini Products
CVE-2024-9876

8.5HIGH

Key Information:

Vendor

Abb

Status
Anc
Anc-l
Anc-mini
Vendor
CVE Published:
30 April 2025

What is CVE-2024-9876?

The identified vulnerability allows unauthorized modification of assumed-immutable data in ABB's ANC, ANC-L, and ANC-mini products. This issue impacts versions up to 1.1.4, posing risks by potentially altering data integrity without detection. Users of these products need to be aware of this flaw to ensure the security and reliability of their operations.

Affected Version(s)

ANC 0 <= 1.1.4

ANC-L 0 <= 1.1.4

ANC-mini 0 <= 1.1.4

References

https://search.abb.com/library/Download.aspx?DocumentID=2...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.