{"id":"CVE-2024-10334","state":"PUBLISHED","title":"Camera passwords stored in clear text","description":"A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used. \n\nAn attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed.\nThis issue affects System 800xA: 5.1.X; System 800xA: 6.0.3.X; System 800xA: 6.1.1.X; System 800xA: 6.2.X.","publishedAt":"2025-02-10T15:02:58.369Z","updatedAt":"2025-02-12T15:44:32.063Z","severity":{"score":7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M","source":"ABB"},"assigner":"ABB","products":["ABB System 800xA"],"affected":[{"vendor":"ABB","product":"System 800xA","defaultStatus":"unaffected","versions":[{"version":"5.1.x","status":"affected","versionType":"custom"},{"version":"6.0.3.x","status":"affected","versionType":"custom"},{"version":"6.1.1.x","status":"affected","versionType":"custom"},{"version":"6.2.x","status":"affected","versionType":"custom"}]}],"references":["https://search.abb.com/library/Download.aspx?DocumentID=7PAA012159&LanguageCode=en&DocumentPartId=&Action=Launch"],"weaknesses":["CWE-256"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/10xxx/CVE-2024-10334.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-10334","state":"PUBLISHED","datePublished":"2025-02-10T15:02:58.369Z","dateUpdated":"2025-02-12T15:44:32.063Z","assignerShortName":"ABB","assignerOrgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateReserved":"2024-10-24T08:42:37.599Z"},"containers":{"cna":{"title":"Camera passwords stored in clear text","descriptions":[{"lang":"en","value":"A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used. \n\nAn attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed.\nThis issue affects System 800xA: 5.1.X; System 800xA: 6.0.3.X; System 800xA: 6.1.1.X; System 800xA: 6.2.X."}],"affected":[{"vendor":"ABB","product":"System 800xA","defaultStatus":"unaffected","versions":[{"version":"5.1.x","status":"affected","versionType":"custom"},{"version":"6.0.3.x","status":"affected","versionType":"custom"},{"version":"6.1.1.x","status":"affected","versionType":"custom"},{"version":"6.2.x","status":"affected","versionType":"custom"}]}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=7PAA012159&LanguageCode=en&DocumentPartId=&Action=Launch"}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NEGLIGIBLE","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":7,"baseSeverity":"HIGH","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-256","description":"CWE-256: Plaintext Storage of a Password","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ABB","orgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateUpdated":"2025-02-10T15:02:58.369Z"},"datePublic":"2025-02-10T05:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-10T15:32:43.860502Z","id":"CVE-2024-10334","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-12T15:44:32.063Z"}}]}}}