# CVE-2024-4008

## Summary

- **CVE ID:** CVE-2024-4008
- **Severity:** HIGH
- **CVSS Score:** 9.6 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:N/AU:N/V:D/RE:M/U:Green)
- **CWE:** CWE-497
- **Published:** Jun 5, 2024
- **Last Modified:** Mar 13, 2026

## Description

FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System

## Affected Products

- ABB, Busch-Jaeger — 2.4! Display 55, SD/U12.55.11-825 (1.00)
- ABB, Busch-Jaeger — 2.4! Display 55, SD/SD/U12.55.1-825 (1.00)
- ABB, Busch-Jaeger — 2.4! Display 63, SD/U12.63.11-825 (1.00)
- ABB, Busch-Jaeger — RoomTouch 4", RT/U12.86.1-825 (1.00)
- ABB, Busch-Jaeger — RoomTouch 4", RT/U12.86.11-825 (1.00)
- ABB, Busch-Jaeger — 2,4'' Display 70, SD/U12.70.11-4015 (1.00)
- ABB, Busch-Jaeger — 2,4'' Display 70, SD-U12-70-1-4015 (1.00)
- ABB, Busch-Jaeger — RoomTouch 4", RT/U12.86.11-811 (1.00)
- ABB, Busch-Jaeger — RoomTouch 4", RT-U12-86-1-811 (1.00)
- ABB, Busch-Jaeger — BCU KNX, BA-U1.0.11 (1.3.0.33)
- ABB, Busch-Jaeger — BCU KNX, BA-U1.0.1 (1.3.0.33)
- ABB, Busch-Jaeger — BCU KNX, BA-U1.0.21 (1.3.0.33)

## References

- [CNA](https://search.abb.com/library/Download.aspx?DocumentID=9AKK108464A0803&LanguageCode=en&DocumentPartId=&Action=Launch)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.27%
- **EPSS Percentile:** 19.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._