by Kastro
Paper/Archive/CVE-2024-4008

CVE-2024-4008

ABB, Busch-Jaeger 2.4! Display 55, SD/U12.55.11-825 — FDSK Leak in KNX Secure Devices

EPSS 0.3%CVSS 9.6
critical.is priorityof 100
33
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 19.9.199 × 204.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System

Affected

ProductAffectedFixed inSource
2.4! Display 55, SD/U12.55.11-8251.00–CNA
2.4! Display 55, SD/SD/U12.55.1-8251.00–CNA
2.4! Display 63, SD/U12.63.11-8251.00–CNA
RoomTouch 4", RT/U12.86.1-8251.00–CNA
RoomTouch 4", RT/U12.86.11-8251.00–CNA
2,4'' Display 70, SD/U12.70.11-40151.00–CNA
2,4'' Display 70, SD-U12-70-1-40151.00–CNA
RoomTouch 4", RT/U12.86.11-8111.00–CNA
RoomTouch 4", RT-U12-86-1-8111.00–CNA
BCU KNX, BA-U1.0.111.3.0.33–CNA
BCU KNX, BA-U1.0.11.3.0.33–CNA
BCU KNX, BA-U1.0.211.3.0.33–CNA

Scores by source

ABB (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
ABB (CNA)7.3CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:N/AU:N/V:D/RE:M/U:Green
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsearch.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch