Abb Anc vulnerabilities

3 CVEs affecting Abb Anc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9877, published 2025-04-30.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-9876, published 2025-04-30. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. : Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.
• CVE-2024-9877, published 2025-04-30. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. : Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.
• CVE-2024-47784, published 2025-04-30. Low severity, CVSS 2.6. EPSS: 0.2% chance of exploitation in the next 30 days. Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version…