Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-48849

Authentication and Authorization Issues

Description

Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB FLXEON

Default version status: unaffected

  • 0 to ≤ <= 9.3.4affected

References