What’s Vulnerable › Vulnerabilities

CVE-2024-4008: FDSK Leak in KNX Secure Devices

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-05 · updated 2026-06-17
• Weakness: CWE-497

Description

FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System

Affected products

• ABB 2Tma310010B0001 Firmware: before 1.02 — fixed in 1.02
• ABB 2Tma310010B0003 Firmware: before 1.02 — fixed in 1.02
• ABB 2Tma310011B0001 Firmware: before 1.02 — fixed in 1.02
• ABB 2Tma310011B0002 Firmware: before 1.02 — fixed in 1.02
• ABB 2Tma310011B0003 Firmware: before 1.02 — fixed in 1.02

How to fix

Upgrade to a fixed version: ABB 2Tma310010B0001 Firmware 1.02; ABB 2Tma310010B0003 Firmware 1.02; ABB 2Tma310011B0001 Firmware 1.02; ABB 2Tma310011B0002 Firmware 1.02; ABB 2Tma310011B0003 Firmware 1.02. Check the vendor advisory for mitigations.

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2024-4008 or the next vulnerability affects your stack