CVE-2024-48849 Authentication and Authorization Issues
Missing Origin Validation in WebSockets allows attackers to bypass session management and perform unauthorized actions on ABB FLXEON systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-48849?
CVE-2024-48849 is a high-severity vulnerability in ABB FLXEON, published on 29 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.
Weakness: CWE-1385
Which versions are affected by CVE-2024-48849?
How do I fix CVE-2024-48849?
No fix has been published for CVE-2024-48849 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-48849 being exploited?
There is no known exploitation of CVE-2024-48849 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-r2c5-m74g-gvx4.