Medium severity · published Jan 7, 2025
CVE-2024-12429
An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully
authenticated attacker can use this vulnerability to read system wide files and configuration
All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AV
AC500 V3 · ABB
before 3.8.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12429
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12429
search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch
seclists.org
http://seclists.org/fulldisclosure/2025/Jan/5
More from AC500 V3
7.0
CVE-2024-12430
An attacker who successfully exploited these vulnerabilities could cause enable command execution