CVE-2024-0985

highpriority · track · 33EPSS 0.018 · 78 %ileCHDEEUNLRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.81% (78th) EPSS
CVSS 8 · high
Is it mine?
79 products
Check your exposure
Who says so?
10 sources
cnnvd · enisa_euvd · fstec_bdu · abb_psirt

EPSS · scored 2026-10-22

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedS+ Engineering abb_psirt

    ABB advises all customers to review their installations to determine if they are using an impacted product as listed above, no further analysis or tools are needed to make this determination. The recommended immediate actions per product are listed below: - Systems using S+ Engineering 2.2 through 2.4 SP2 should upgrade to S+ Engineering 2.4 SP2 RU1 (re-leased in December 2024) or later. - End users who are unable to install one of these updates should immediately look to implement the Mitigation and Workarounds listed below as this will restrict or prevent an attacker’s ability to com-promise the system. ABB recommends that customers apply the update at the earliest convenience.

  • FixedSINEC NMSsiemens_psirt

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109973059/
  • FixedAzure Linux 3.0 ARMmsrc_csaf

    16.3-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • FixedAzure Linux 3.0 x64msrc_csaf

    16.3-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • FixedCBL Mariner 2.0 ARMmsrc_csaf

    14.11-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • FixedCBL Mariner 2.0 x64msrc_csaf

    14.11-1:CBL-Mariner:https://nvd.nist.gov/vuln/detail/CVE-2024-0985

    https://nvd.nist.gov/vuln/detail/CVE-2024-0985
  • FixedSINEC NMScisa_csaf_ot

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109973059/
  • FixedS+ Engineering cisa_csaf_ot

    ABB advises all customers to review their installations to determine if they are using an impacted product as listed above, no further analysis or tools are needed to make this determination. The recommended immediate actions per product are listed below: - Systems using S+ Engineering 2.2 through 2.4 SP2 should upgrade to S+ Engineering 2.4 SP2 RU1 (re-leased in December 2024) or later. - End users who are unable to install one of these updates should immediately look to implement the Mitigation and Workarounds listed below as this will restrict or prevent an attacker’s ability to com-promise the system. ABB recommends that customers apply the update at the earliest convenience.

  • MitigationS+ Engineering abb_psirt

    Any exploit of these vulnerabilities would require that the attacker has access to the site’s S+ client/server network. Following ABB’s recommended security practices, including network architecture and perimeter firewall, are mitigating factors in preventing external access to the S+ client/server net-work. Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationS+ Engineering cisa_csaf_ot

    Any exploit of these vulnerabilities would require that the attacker has access to the site’s S+ client/server network. Following ABB’s recommended security practices, including network architecture and perimeter firewall, are mitigating factors in preventing external access to the S+ client/server net-work. Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • WorkaroundS+ Engineering abb_psirt

    No workarounds are available. Assess the installation specific risk based on this advisory. Use the recommendations described under “Mitigating factors” or “Recommended immediate actions”.

  • WorkaroundS+ Engineering cisa_csaf_ot

    No workarounds are available. Assess the installation specific risk based on this advisory. Use the recommendations described under “Mitigating factors” or “Recommended immediate actions”.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.0
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.1 · impact 5.9
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:Csecondary · CISA US
v3.18highAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondaryexploitability 2.1 · impact 5.9
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:Csecondary · ABB PSIRT
v3.18highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · Microsoft Security Response Center US
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-264USCWE-271USCWE-271USCWE-271USCWE-271USCWE-271USCWE-271US
05

affected products (79)

Products and version ranges known to be affected.

showing 20 of 79
06

advisories (9)

Vendor and ecosystem advisories describing this.

  • 7PAA017341PostgreSQL vulnerabilities in ABB Ability™ Symphony® Plus Engineering2026-04-13csaf · abb_psirtCH

    ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+ Client Server network, they could exploit such vulnerabilities by executing arbitrary code and potentially compromising the entire system.

  • NCSC-2024-0332Kwetsbaarheden verholpen in Siemens productenNL2024-08-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, INTRALOG, LOGO!, NX, SCALANCE, SINEC en Teamcenter.

  • SSA-784301SSA-784301: Multiple Vulnerabilities in SINEC NMS Before V3.02024-08-13csaf · siemens_psirtDE

    SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.

  • WID-SEC-W-2024-0335PostgreSQL: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2024-02-08csaf · cert_bundDE

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen.

  • WID-SEC-W-2024-3377Dell PowerProtect Data Domain: Mehrere SchwachstellenDeutsch2024-11-07csaf · cert_bundDE

    Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen und um nicht näher beschriebene Auswirkungen zu erzielen.

  • msrc_CVE-2024-0985CVE-2024-09852024-02-13csaf · msrc_csafUS

    To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

  • ICSA-24-228-06Siemens SINEC NMS2024-08-13icsa · cisa_csaf_otUS

    SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.

  • ICSA-26-120-06ABB Ability Symphony Plus Engineering2026-04-13icsa · cisa_csaf_otUS

    ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+ Client Server network, they could exploit such vulnerabilities by executing arbitrary code and potentially compromising the entire system.

  • BIT-postgresql-2024-0985PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL2024-03-06vendor · osvUS

    Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduabb_psirtcert_bundncsc_nlsiemens_psirtmsrc_csafcisa_csaf_otosvNVDCVE.orgMITRE
published 2024-02-08modified 2026-06-17
09

references (12)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan