CVE-2024-48851

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation.

This issue affects FLXEON: through 9.3.5.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1287

Affected software

No affected versions have been published.

Timeline

Published
Sep 18, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-488529.4Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through httpCVE-2024-488539.0An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT uCVE-2024-488547.5Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an informatioCVE-2024-488557.5Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an informatCVE-2024-488569.8Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-ofCVE-2024-488577.5NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a deniCVE-2024-488587.5Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denCVE-2024-488599.1An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabilityCVE-2024-48864.3The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the requestCVE-2024-488609.8An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remoCVE-2024-488617.8An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow locaCVE-2024-488629.8A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to tra
CVE-2024-48851: High severity, CVSS 7.2 | Vulnix