CVE-2024-47784

Low

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change…

ABB·CWE-620·Published 2025-04-30

CVSS

2.6

EPSS

0.00

KEV

Exploits

cve.orgen

215 chars

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier.

NVDen

215 chars

NVDes

275 chars

Cambio de contraseña no verificado para el software ANC que permite a un atacante autenticado eludir la verificación de contraseña antigua en el formulario de cambio de contraseña a través de una HMI web. Este problema afecta a la versión 1.1.4 y anteriores del software ANC.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	2.6	—	—	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
3.1	Secondary	NVD	2.6	1.2	1.4	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
4.0	Primary	cve.org	2.1	—	—	CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/R:U
4.0	Secondary	NVD	2.1	—	—	CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:X/U:X