CVE-2024-4008
Critical
Description
FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System
SeverityCritical
CVSS9.6
Exploit probability—
ProductAbb 2tma310010b0001 Firmware
PublishedJun 5, 2024
First seenJun 5, 2024
Weakness typeCWE-497CWE-497
How to fix
Update
- abb 2tma310010b0001_firmware1.02 or later
- abb 2tma310011b0001_firmware1.02 or later
- abb 2tma310011b0002_firmware1.02 or later
- abb 2tma310010b0003_firmware1.02 or later
- abb 2tma310011b0003_firmware1.02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb 2tma310010b0001_firmware | v < 1.02 | 1.02 |
| abb 2tma310011b0001_firmware | v < 1.02 | 1.02 |
| abb 2tma310011b0002_firmware | v < 1.02 | 1.02 |
| abb 2tma310010b0003_firmware | v < 1.02 | 1.02 |
| abb 2tma310011b0003_firmware | v < 1.02 | 1.02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.