Approved changes feed: RSS · Atom

cpe:2.3:a:abb:flxeon:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAbb (6be1db4f-4f59-5a03-a118-0ff43377170e)
ProductFlxeon (6065d3aa-cbc5-5a02-8f12-035f1b5f553b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10207 vulnerable 2026-06-08 07:02:26.443791 Authenticated File Disclosure/Delete
HIGH (7.2)
Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.
Published: 2025-09-18T11:25:07.835Z
Updated: 2025-09-18T13:32:39.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10205 vulnerable 2026-06-08 07:02:26.443446 Predictable Salt and Weak Hashing Algorithm
HIGH (8.8)
Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions
Published: 2025-09-17T14:51:52.567Z
Updated: 2025-09-18T11:22:31.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48852 vulnerable 2026-06-08 06:50:10.097710 Information disclosures
CRITICAL (9.4)
Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This issue affects FLXEON through <= 9.3.4.
Published: 2025-01-29T18:59:02.432Z
Updated: 2025-02-12T19:51:13.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48851 vulnerable 2026-06-08 06:50:10.097346 Remote Code Execution
HIGH (7.2)
Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5.
Published: 2025-09-18T11:17:35.712Z
Updated: 2025-09-18T13:34:37.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48849 vulnerable 2026-06-08 06:50:10.095559 Authentication and Authorization Issues
CRITICAL (9.4)
Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.
Published: 2025-01-29T18:23:59.435Z
Updated: 2025-01-29T18:46:37.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48842 vulnerable 2026-06-08 06:50:10.068912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48841 vulnerable 2026-06-08 06:50:10.068520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.