CVE-2024-48841

CVE-2024-48841 is a critical vulnerability (CVSS 10.0, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) classified under CWE-77, affecting FLXEON versions 9.3.4 and older. The issue enables network access to execute arbitrary code with elevated privileges.

An unauthenticated remote attacker requires only network access to exploit this vulnerability, with low attack complexity and no user interaction needed. Successful exploitation allows the attacker to achieve high-impact effects on confidentiality, integrity, and availability while expanding scope to elevated privileges through arbitrary code execution.

Mitigation guidance is detailed in the ABB security advisory available at https://search.abb.com/library/Download.aspx?DocumentID=9AKK108470A5684&LanguageCode=en&DocumentPartId=PDF&Action=Launch.