CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System

Scoring

Severity

HIGH

CVSS base score

9.6

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:N/AU:N/V:D/RE:M/U:Green

EPSS probability

0.27%

CWE

CWE-497

Published

2024-06-05

Last modified

2026-03-13

Affected products

• ABB, Busch-Jaeger 2.4! Display 55, SD/U12.55.11-825
• ABB, Busch-Jaeger 2.4! Display 55, SD/SD/U12.55.1-825
• ABB, Busch-Jaeger 2.4! Display 63, SD/U12.63.11-825
• ABB, Busch-Jaeger RoomTouch 4", RT/U12.86.1-825
• ABB, Busch-Jaeger RoomTouch 4", RT/U12.86.11-825
• ABB, Busch-Jaeger 2,4'' Display 70, SD/U12.70.11-4015
• ABB, Busch-Jaeger 2,4'' Display 70, SD-U12-70-1-4015
• ABB, Busch-Jaeger RoomTouch 4", RT/U12.86.11-811

Weakness type

• CWE-497

Related vulnerabilities

• CVE-2026-61911 — An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An...
• CVE-2026-81394 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-81387 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-69315 — Windows License Manager Information Disclosure Vulnerability
• CVE-2026-68842 — Windows MIDI Service Module Information Disclosure Vulnerability
• CVE-2026-71330 — Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
• CVE-2026-69832 — Win32k Information Disclosure Vulnerability
• CVE-2026-69723 — Windows Kernel Information Disclosure Vulnerability

Markdown version · Browse all CVEs