CVE-2024-4008

FDSK Leak in KNX Secure Devices

Published Jun 5, 2024 CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Description
FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-32574 FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System
History
Type Values Removed Values Added
Weaknesses CWE-200
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Weaknesses CWE-497
Type Values Removed Values Added
Metrics epss

{'score': 0.00079}

epss

{'score': 0.00209}

Weaknesses
  • CWE-497

    Exposure of Sensitive System Information to an Unauthorized Control Sphere

Sources

Status
PUBLISHED
Assigner
ABB
Published
Updated
Sep 17, 2025, 5:33 AM
Reserved
Apr 19, 2024, 5:09 PM
Status
Modified
Published
Jun 5, 2024, 6:15 PM
Modified
Jun 17, 2026, 8:00 AM