What’s Vulnerable › Vulnerabilities

CVE-2024-47784: Unverified Password Change

• Severity: low (CVSS 2.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-30 · updated 2026-06-17
• Weakness: CWE-620

Description

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier.

Affected products

• ABB ANC: through 1.1.4
• ABB ANC-L: through 1.1.4
• ABB ANC-mini: through 1.1.4

References

• https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch

Get alerted when CVE-2024-47784 or the next vulnerability affects your stack