CVE-2024-9876 - Application is vulnerable to Privilege escalation

Back Back to CVE browser

HIGH

Application is vulnerable to Privilege escalation

Published Apr 30, 2025

8.5

HIGH

CVSS 4.0

EPSS 0.25%

Description

: Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.

Affected products

Vendor ABB Product ANC Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.1.4
Vendor ABB Product ANC-L Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.1.4
Vendor ABB Product ANC-mini Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.1.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ABB

ANC

unaffected

Version	Status	Constraints
0	affected	<=1.1.4

ABB

ANC-L

unaffected

Version	Status	Constraints
0	affected	<=1.1.4

ABB

ANC-mini

unaffected

Version	Status	Constraints
0	affected	<=1.1.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-471

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12782		Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2CRT000006&LanguageCode=en&DocumentPartId=PDF&Action=Launch