2 lines
9.2 KiB
JSON
2 lines
9.2 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://new.abb.com/products/de/2TMA310010B0001/sd-u12-55-11-825","defaultStatus":"unaffected","platforms":["proprietary"],"product":"2.4! Display 55, SD/U12.55.11-825","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310011B0001/sd-u12-55-1-825","defaultStatus":"unaffected","platforms":["proprietary"],"product":"2.4! Display 55, SD/SD/U12.55.1-825","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310010B0003/","defaultStatus":"unaffected","platforms":["proprietary"],"product":"2.4! Display 63, SD/U12.63.11-825","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310011B0003/rt-u12-86-1-825","defaultStatus":"unaffected","platforms":["proprietary"],"product":"RoomTouch 4\", RT/U12.86.1-825","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310010B0004/rt-u12-86-11-825","defaultStatus":"unaffected","product":"RoomTouch 4\", RT/U12.86.11-825","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310010B0006/sd-u12-70-11-4015","defaultStatus":"unaffected","product":"2,4'' Display 70, SD/U12.70.11-4015","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310011B00004/sd-u12-70-1-4015","defaultStatus":"unaffected","product":"2,4'' Display 70, SD-U12-70-1-4015","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310010W0001/rt-u12-86-11-811","defaultStatus":"unaffected","platforms":["proprietary"],"product":"RoomTouch 4\", RT/U12.86.11-811","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2TMA310011W0001/rt-u12-86-1-811","defaultStatus":"unaffected","platforms":["proprietary"],"product":"RoomTouch 4\", RT-U12-86-1-811","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.00","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2CKA006120A0079/ba-u1-0-11","defaultStatus":"unaffected","platforms":["proprietary"],"product":"BCU KNX, BA-U1.0.11","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.3.0.33","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2CKA006120A0080/ba-u1-0-1","defaultStatus":"unaffected","platforms":["proprietary"],"product":"BCU KNX, BA-U1.0.1","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.3.0.33","versionType":"custom"}]},{"collectionURL":"https://new.abb.com/products/de/2CKA006120A0081/ba-u1-0-21","defaultStatus":"unaffected","platforms":["proprietary"],"product":"BCU KNX, BA-U1.0.21","vendor":"ABB, Busch-Jaeger","versions":[{"status":"affected","version":"1.3.0.33","versionType":"custom"}]}],"source":"cybersecurity@ch.abb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:2tma310010b0001_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2FB4E951-BB1E-49EF-89E1-5FC528E7C39F","versionEndExcluding":"1.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:2tma310010b0001:-:*:*:*:*:*:*:*","matchCriteriaId":"5887B6A4-F626-43C0-B660-18E9BCB7573A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:2tma310011b0001_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"47B72D86-BE3B-4E5E-AF78-D15B7BAAFB07","versionEndExcluding":"1.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:2tma310011b0001:-:*:*:*:*:*:*:*","matchCriteriaId":"FF081477-A638-403C-B964-512AD9D778A1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:2tma310011b0002_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BF7134CF-B90B-44C5-9AE9-634AD6390C82","versionEndExcluding":"1.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:2tma310011b0002:-:*:*:*:*:*:*:*","matchCriteriaId":"B2040D08-9289-452C-87A1-0FDE70923797","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:2tma310010b0003_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"90A07BBA-AC3C-43A4-87F5-B7873DE0E83E","versionEndExcluding":"1.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:2tma310010b0003:-:*:*:*:*:*:*:*","matchCriteriaId":"EAB58037-6EC4-4816-B310-2D8000A1FF74","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:2tma310011b0003_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9125F6EB-0667-47AD-B2EA-F48FF5FE4D63","versionEndExcluding":"1.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:2tma310011b0003:-:*:*:*:*:*:*:*","matchCriteriaId":"3D74D97B-D726-445F-9E69-9A613D466629","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Replay Attack\n\nin ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System"},{"lang":"es","value":"Replay Attack en ABB, Busch-Jaeger, FTS Display (versión 1.00) y BCU (versión 1.3.0.33) permite al atacante capturar/reproducir telegramas KNX al sistema de bus KNX local"}],"id":"CVE-2024-4009","lastModified":"2026-06-17T08:00:55.953","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":6.0,"source":"cybersecurity@ch.abb.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"NOT_DEFINED","Safety":"NEGLIGIBLE","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":7.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"GREEN","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:D/RE:M/U:Green","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"cybersecurity@ch.abb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4009","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-06-06T13:52:06.305528Z","version":"2.0.3"}}]},"published":"2024-06-05T18:15:11.420","references":[{"source":"cybersecurity@ch.abb.com","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch"}],"sourceIdentifier":"cybersecurity@ch.abb.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-294"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-294"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|