CVE-2024-10334 Camera passwords stored in clear text
Attackers can access clear-text camera passwords to stop or manipulate video feeds in ABB System 800xA environments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10334?
CVE-2024-10334 is a high-severity vulnerability in ABB System 800xA, published on 10 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used.
An attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed. This issue affects System 800xA: 5.1.X; System 800xA: 6.0.3.X; System 800xA: 6.1.1.X; System 800xA: 6.2.X.
Weakness: CWE-256
Which versions are affected by CVE-2024-10334?
How do I fix CVE-2024-10334?
No fix has been published for CVE-2024-10334 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-10334 being exploited?
There is no known exploitation of CVE-2024-10334 in the wild and no public exploit code.
Sources
Also known as GHSA-7348-rmw4-rhvw.