CVE-2024-48849

published 2025-01-29

CVE-2024-48849: Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue…

high 8.8 CVSS 4.0

AV N AC L AT N PR N UI N VC L VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

EXPLOIT

Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
abb	flxeon	<= <= 9.3.4	—

CWE-1385