CVE-2024-10037
CVSS 3.1 Score 4.4 of 10 (medium)
Details
Published Mar 25, 2025
Updated: Mar 27, 2025
CWE ID 476
Summary
CVE-2024-10037 is a newly identified vulnerability affecting the RTU500 web server component. A denial-of-service condition can be triggered when a specially crafted message sequence is sent over a WebSocket connection. For an attack to be successful, the attacker must have proper authentication and enable the test mode function on the RTU500. The CMU application integrated with the RTU500 will automatically recover itself if a denial-of-service attack is executed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- ABB RTU500 Remote Terminal Units
Affected Vendors
- ABB