Description
Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI
This issue affects ANC software version 1.1.4 and earlier.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | ANC | ≤ 1.1.4 | — |
| ABB | ANC-L | ≤ 1.1.4 | — |
| ABB | ANC-mini | ≤ 1.1.4 | — |
Advisories 1
- 2CRT000006 ANC – ABB Network Card Multiple vulnerabilities in ANC ABB PSIRT · Apr 30, 2025