Cybersecurity

ABB Drive Composer

Analyst 207|
ABB Drive Composer

Summary of ABB Drive Composer Vulnerability

This document outlines a critical vulnerability in ABB’s Drive Composer software, which could allow unauthorized access to the file system on the host machine, potentially leading to the execution of malicious code. The vulnerability is classified as a ‘Path Traversal’ issue.

1. EXECUTIVE SUMMARY

  • CVSS v4 Score: 9.3
  • Exploitation: Remotely exploitable with low attack complexity
  • Vendor: ABB
  • Equipment: Drive Composer
  • Vulnerability: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

2. RISK EVALUATION

Exploitation of this vulnerability could grant attackers unauthorized access to the file system, enabling them to run malicious code and compromise the system.

3. TECHNICAL DETAILS

3.1 AFFECTED PRODUCTS

The following versions of Drive Composer are affected:

  • Drive Composer entry: Version 2.9.0.1 and prior
  • Drive Composer pro: Version 2.9.0.1 and prior

3.2 VULNERABILITY OVERVIEW

The vulnerability allows unauthorized file system access, leading to potential system compromise. It is identified as CVE-2024-48510 with a CVSS v3 score of 9.8 and a CVSS v4 score of 9.3.

3.3 BACKGROUND

  • Critical Infrastructure Sectors: Critical Manufacturing
  • Deployment: Worldwide
  • Company Headquarters: Switzerland

3.4 RESEARCHER

ABB reported this vulnerability to CISA.

4. MITIGATIONS

ABB has released Drive Composer Version 2.9.1 to address this vulnerability. Users are encouraged to update as soon as possible. Additional security practices are recommended, including network isolation and regular software updates.

5. UPDATE HISTORY

  • February 6, 2025: Initial Publication

For more detailed information, please refer to the original article here.

Vulnerability
Related Intelligence

Continue Reading

Laptop on a minimalist desk with a potted plant and stack of paper in soft natural light.

WordPress Discloses Core Flaw Enabling Unauthenticated Code Execution

WordPress has patched a critical flaw that allowed hackers to execute code remotely without authentication, releasing versions 6.9.5 and 7.0.2 to fix the vulnerability. The update addresses a REST API batch-route confusion and SQL injection issue that could be triggered by a simple HTTP request.

Analyst 207
Rows of computer servers and networking equipment in a dimly lit data center with one server highlighted.

OpenSSL Flaw Exposes Servers to Memory Exhaustion Attacks

A newly discovered OpenSSL flaw, dubbed HollowByte, leaves unpatched servers vulnerable to memory exhaustion attacks, where a mere 11 bytes can trigger the allocation of up to 131 KB of memory for a message that never arrives. This tiny trigger can bring a server to its knees, freezing memory and blocking critical connections.

Analyst 207
Dimly lit server room with one server showing high memory usage.

OpenSSL Servers Vulnerable to Memory-Bloating DDoS Attacks

Beware: a simple 11-byte malicious input can cripple OpenSSL servers with a devastating DDoS attack, leaving them permanently bloated and vulnerable. This sneaky exploit, dubbed HollowByte, takes advantage of a weakness in OpenSSL's TLS handshake to drain server resources.

Analyst 207
Stack of vintage papers with handwritten notes and diagrams on a formal archive room table.

Turing's Voice Encryption System Uncovered in Wartime Papers

A treasure trove of wartime papers, known as the "Bayley papers," has surfaced in London, selling for nearly $500,000 and revealing groundbreaking details about Alan Turing's pioneering voice encryption system. This long-hidden collection has finally been transferred into the public sphere, offering historians and technologists a fascinating glimpse into Turing's secret work.

Analyst 207