VULNERABILITY INTELLIGENCE

CVE-2024-8603

CVSS score7.5 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-01-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices.

Weakness classification

  • cybersecurity@ch.abb.com: CWE-327

Primary references