Path Traversal in Abb Ac500 V3
CVE-2024-12429
An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
Affected products
- Abb Ac500 V3 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-12429?
- CVE-2024-12429 is a medium-severity vulnerability in Abb Ac500 V3, classified under Path Traversal. CVSS score: 4.3/10. Published 2025-01-07.
- How severe is CVE-2024-12429?
- Medium severity. CVSS v3 base score is 4.3 out of 10.