Skip to content
Sign in
2.1 Low

CVE-2024-47784 Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in…

Description

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier.

Affected products and versions

Product Affected versions Fixed in
ANC 1.1 earliest → 1.1.4 No fix stated
ANC-L 1.1 earliest → 1.1.4 No fix stated
ANC-mini 1.1 earliest → 1.1.4 No fix stated

Other CVEs of ANC

The 3 CVEs of ANC →
CVE-2024-9877 : Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue… 5.3 Medium CVE-2024-9876 : Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects… 8.5 High
Track this CVE