8.8
High
CVE-2024-48849 Missing Origin Validation in WebSockets vulnerability in FLXEON
Description
Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FLXEON | Versions not published |
Other CVEs of FLXEON
The 7 CVEs of FLXEON →
CVE-2025-10207
Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5
7.5
High
CVE-2024-48851
Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an…
7.5
High
CVE-2025-10205
Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through…
8.7
High
CVE-2024-48842
Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions
7.3
High