CVE-2024-0985

highPriorität · verfolgen · 33EPSS 0.018 · 78. PerzentilCHDEEUNLRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.81% (78th) EPSS
CVSS 8 · high
Is it mine?
79 products
Prüfe deine Angriffsfläche
Who says so?
10 sources
cnnvd · enisa_euvd · fstec_bdu · abb_psirt

EPSS · bewertet 2026-10-22

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenS+ Engineering abb_psirt

    ABB advises all customers to review their installations to determine if they are using an impacted product as listed above, no further analysis or tools are needed to make this determination. The recommended immediate actions per product are listed below: - Systems using S+ Engineering 2.2 through 2.4 SP2 should upgrade to S+ Engineering 2.4 SP2 RU1 (re-leased in December 2024) or later. - End users who are unable to install one of these updates should immediately look to implement the Mitigation and Workarounds listed below as this will restrict or prevent an attacker’s ability to com-promise the system. ABB recommends that customers apply the update at the earliest convenience.

  • BehobenSINEC NMSsiemens_psirt

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109973059/
  • BehobenAzure Linux 3.0 ARMmsrc_csaf

    16.3-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • BehobenAzure Linux 3.0 x64msrc_csaf

    16.3-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • BehobenCBL Mariner 2.0 ARMmsrc_csaf

    14.11-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • BehobenCBL Mariner 2.0 x64msrc_csaf

    14.11-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • BehobenSINEC NMScisa_csaf_ot

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109973059/
  • BehobenS+ Engineering cisa_csaf_ot

    ABB advises all customers to review their installations to determine if they are using an impacted product as listed above, no further analysis or tools are needed to make this determination. The recommended immediate actions per product are listed below: - Systems using S+ Engineering 2.2 through 2.4 SP2 should upgrade to S+ Engineering 2.4 SP2 RU1 (re-leased in December 2024) or later. - End users who are unable to install one of these updates should immediately look to implement the Mitigation and Workarounds listed below as this will restrict or prevent an attacker’s ability to com-promise the system. ABB recommends that customers apply the update at the earliest convenience.

  • MitigationS+ Engineering abb_psirt

    Any exploit of these vulnerabilities would require that the attacker has access to the site’s S+ client/server network. Following ABB’s recommended security practices, including network architecture and perimeter firewall, are mitigating factors in preventing external access to the S+ client/server net-work. Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationS+ Engineering cisa_csaf_ot

    Any exploit of these vulnerabilities would require that the attacker has access to the site’s S+ client/server network. Following ABB’s recommended security practices, including network architecture and perimeter firewall, are mitigating factors in preventing external access to the S+ client/server net-work. Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • WorkaroundS+ Engineering abb_psirt

    No workarounds are available. Assess the installation specific risk based on this advisory. Use the recommendations described under “Mitigating factors” or “Recommended immediate actions”.

  • WorkaroundS+ Engineering cisa_csaf_ot

    No workarounds are available. Assess the installation specific risk based on this advisory. Use the recommendations described under “Mitigating factors” or “Recommended immediate actions”.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.1 · Auswirkung 5.9
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:Csecondary · CISA US
v3.18highAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 2.1 · Auswirkung 5.9
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:Csecondary · ABB PSIRT
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · Microsoft Security Response Center US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-264USCWE-271USCWE-271USCWE-271USCWE-271USCWE-271USCWE-271US
05

betroffene Produkte (79)

Betroffene Produkte und Versionsbereiche.

20 von 79 angezeigt
06

Advisories (9)

Hersteller- und Ökosystem-Meldungen dazu.

  • 7PAA017341PostgreSQL vulnerabilities in ABB Ability™ Symphony® Plus Engineering2026-04-13csaf · abb_psirtCH

    ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+ Client Server network, they could exploit such vulnerabilities by executing arbitrary code and potentially compromising the entire system.

  • NCSC-2024-0332Kwetsbaarheden verholpen in Siemens productenNL2024-08-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, INTRALOG, LOGO!, NX, SCALANCE, SINEC en Teamcenter.

  • SSA-784301SSA-784301: Multiple Vulnerabilities in SINEC NMS Before V3.02024-08-13csaf · siemens_psirtDE

    SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.

  • WID-SEC-W-2024-0335PostgreSQL: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2024-02-08csaf · cert_bundDE

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen.

  • WID-SEC-W-2024-3377Dell PowerProtect Data Domain: Mehrere SchwachstellenDeutsch2024-11-07csaf · cert_bundDE

    Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen und um nicht näher beschriebene Auswirkungen zu erzielen.

  • msrc_CVE-2024-0985CVE-2024-09852024-02-13csaf · msrc_csafUS

    To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

  • ICSA-24-228-06Siemens SINEC NMS2024-08-13icsa · cisa_csaf_otUS

    SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.

  • ICSA-26-120-06ABB Ability Symphony Plus Engineering2026-04-13icsa · cisa_csaf_otUS

    ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+ Client Server network, they could exploit such vulnerabilities by executing arbitrary code and potentially compromising the entire system.

  • BIT-postgresql-2024-0985PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL2024-03-06vendor · osvUS

    Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bduabb_psirtcert_bundncsc_nlsiemens_psirtmsrc_csafcisa_csaf_otosvNVDCVE.orgMITRE
veröffentlicht 2024-02-08geändert 2026-06-17
09

Referenzen (12)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan