ABB Drive Composer
An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the execution of arbitrary code, data leakage, or even complete system compromise.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-48510US | critical9.8 | Exploit | ||
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: Thi… | ||||
references
External citations — patches, advisories, analysis.
- Directory Traversal vulnerability in DotNetZip
- ICS Advisory ICSA-25-037-03 JSONself
- Technical Guide - Cybersecurity for ABB Drives (3AXD10000492137)
- ABB CYBERSECURITY ADVISORY - PDF version
- Recommended Practicesexternal
- ICS Advisory ICSA-25-037-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- FixedDrive Composer entry
The vulnerability mentioned in this advisory has been corrected in Drive Composer version 2.9.1. Drive Composer version 2.9.1 (both entry and pro) is downloadable from the product page: https://new.abb.com/drives/software-tools/drive-composer ABB recommends that customers apply the update at earliest convenience.
https://new.abb.com/drives/software-tools/drive-composer - FixedDrive Composer pro
The vulnerability mentioned in this advisory has been corrected in Drive Composer version 2.9.1. Drive Composer version 2.9.1 (both entry and pro) is downloadable from the product page: https://new.abb.com/drives/software-tools/drive-composer ABB recommends that customers apply the update at earliest convenience.
https://new.abb.com/drives/software-tools/drive-composer
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan