Medium severity · published Jun 21, 2024
CVE-2024-3036
Communication DoS vulnerability
5.7
CVSS
0.3%
EPSS
No
On KEV
Description
Improper Input Validation vulnerability in ABB 800xA Base.
An attacker who successfully exploited this
vulnerability could cause services to crash by sending specifically crafted messages.
This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
8B
800xA Base · ABB
6.0.0 through 6.1.1-2 · source: vendor
8B
800xa Base System · Abb
6.0 through 6.0.3-9; 6.1 through 6.1.1-2 · source: NVD