Abb Anc-Mini vulnerabilities

3 known vulnerabilities affecting abb/anc-mini.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2024-9876HIGHCVSS 8.5≤ 1.1.42025-04-30

CVE-2024-9876 [HIGH] CWE-471 CVE-2024-9876: : Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.Th : Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.

CVE-2024-9877MEDIUMCVSS 5.3≤ 1.1.42025-04-30

CVE-2024-9877 [MEDIUM] CWE-598 CVE-2024-9877: : Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB AN : Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.

CVE-2024-47784LOWCVSS 2.1≤ 1.1.42025-04-30

CVE-2024-47784 [LOW] CWE-620 CVE-2024-47784: Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier.