CVE-2024-47784

published 2025-04-30

CVE-2024-47784: Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI…

low 2.1 CVSS 4.0

AV A AC H AT N PR L UI N VC N VI L VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R U V X RE X U X

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI
This issue affects ANC software version 1.1.4 and earlier.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
abb	anc	<= 1.1.4	—
abb	anc-l	<= 1.1.4	—
abb	anc-mini	<= 1.1.4	—

CWE-620