ICSA-25-037-03

icsaUScisa_csaf_ot

ABB Drive Composer

Advisory ansehen veröffentlicht 2025-01-10

An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the execution of arbitrary code, data leakage, or even complete system compromise.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-48510UScritical9.8Exploit
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: Thi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • BehobenDrive Composer entry

    The vulnerability mentioned in this advisory has been corrected in Drive Composer version 2.9.1. Drive Composer version 2.9.1 (both entry and pro) is downloadable from the product page: https://new.abb.com/drives/software-tools/drive-composer ABB recommends that customers apply the update at earliest convenience.

    https://new.abb.com/drives/software-tools/drive-composer
  • BehobenDrive Composer pro

    The vulnerability mentioned in this advisory has been corrected in Drive Composer version 2.9.1. Drive Composer version 2.9.1 (both entry and pro) is downloadable from the product page: https://new.abb.com/drives/software-tools/drive-composer ABB recommends that customers apply the update at earliest convenience.

    https://new.abb.com/drives/software-tools/drive-composer
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan