Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-13967— ession-Management Failure

Quick assessment

Affected
ABB EIBPORT V3 KNX
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

BAB TECHNOLOGIE EIBPORT V3是德国BAB TECHNOLOGIE公司的一款高级设备，用于KNX系统可视化和自动化，它允许用户通过移动设备访问和管理智能建筑中的各种功能。 BAB TECHNOLOGIE EIBPORT V3 3.9.8及之前版本存在授权问题漏洞，该漏洞源于集成Web服务器提供的配置网页存在未授权访问问题。

CVSS 8.8 · High EPSS 0.50% · P41

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-13967

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ession-Management Failure
Source: CVE Program / CVE List V5
Vulnerability Description
This vulnerability allows the successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web Server of EIBPORT. This issue affects EIBPORT V3 KNX: through 3.9.8; EIBPORT V3 KNX GSM: through 3.9.8.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
会话固定
Source: CVE Program / CVE List V5
Vulnerability Title
BAB TECHNOLOGIE EIBPORT V3 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BAB TECHNOLOGIE EIBPORT V3是德国BAB TECHNOLOGIE公司的一款高级设备，用于KNX系统可视化和自动化，它允许用户通过移动设备访问和管理智能建筑中的各种功能。 BAB TECHNOLOGIE EIBPORT V3 3.9.8及之前版本存在授权问题漏洞，该漏洞源于集成Web服务器提供的配置网页存在未授权访问问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
ABB EIBPORT V3 KNX 0 ~ 3.9.8 -
ABB EIBPORT V3 KNX GSM 0 ~ 3.9.8 -

II. Public POCs for CVE-2024-13967

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-13967

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same vendor: ABB
Same weakness: CWE-384

V. Comments for CVE-2024-13967

No comments yet

Leave a comment