CVE-2024-47784 - Unverified Password Change

Back Back to CVE browser

LOW

Unverified Password Change

Published Apr 30, 2025

2.1

LOW

CVSS 4.0

EPSS 0.19%

Description

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier.

Affected products

Vendor ABB Product ANC Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.1.4
Vendor ABB Product ANC-L Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.1.4
Vendor ABB Product ANC-mini Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.1.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ABB

ANC

unaffected

Version	Status	Constraints
0	affected	<=1.1.4

ABB

ANC-L

unaffected

Version	Status	Constraints
0	affected	<=1.1.4

ABB

ANC-mini

unaffected

Version	Status	Constraints
0	affected	<=1.1.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-620

References (1)

https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch

Link	Providers	Tags
https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published Apr 30, 2025

Updated Apr 30, 2025

Reserved Oct 1, 2024

Link CVE-2024-47784

CISA Vulnrichment

Updated Apr 30, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-47784

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-47784