CVE-2024-4008CWE-497

FDSK Leak in KNX Secure Devices

High · published June 5, 2024

CVSS v4.0
7.3
EPSS
0%
Percentile
18.8
In the wild
Unconfirmed
What it is

⚡ A leak in ABB’s FDSK could let an attacker take over your local KNX Bus-System—think of it as a mischievous guest who sneaks into your home and starts controlling all your gadgets! 🔌 Imagine if someone could walk into a smart home and control everything from the lights to the thermostat, without you ever knowing. That’s what this vulnerability allows—an unwelcome intruder tampering with your automation setup without any warning! This could lead to an attacker manipulating your smart devices—turning off alarms, changing settings, or even causing damage. The potential for chaos is absolutely devastating if you rely on these systems for security or comfort!

Put simply

Imagine if someone could walk into a smart home and control everything from the lights to the thermostat, without you ever knowing. That’s what this vulnerability allows—an unwelcome intruder tampering with your automation setup without any warning! The vulnerability in ABB’s FDSK allows unauthorized access to the local KNX Bus-System, which controls various smart devices in your building. This enables attackers to take over device functionalities without needing legitimate credentials.

What to do

This could lead to an attacker manipulating your smart devices—turning off alarms, changing settings, or even causing damage. The potential for chaos is absolutely devastating if you rely on these systems for security or comfort! To safeguard your system, update ABB Busch-Jaeger’s FTS Display to version 1.01 and BCU to 1.3.0.34 immediately. Regularly audit your network for unauthorized access and consider setting up additional layers of security. You’ve got this! By taking these steps, you’ll keep your smart systems safe and secure! 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:N/AU:N/V:D/RE:M/U:Green
EPSS
0.00274 · 18.8th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2024-06-05T17:15Z
EPSS history
Timeline
  • 05 JUN 17:15Z
    FDSK Leak in KNX Secure Devices
    cvelistv5